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LEAVING THE BACK DOOR OPEN 

DON'T LET THE 'WEENIE' THING HAPPEN TO YOU 



BY REBECCA ROHAN 

In an alarming report of some- 
thing that (mostly) never hap- 
pened, a Wall Street Journal 
article jumped to the Associated 
Press (AP), then multiplied 
across local television and news- 
paper outlets with the "news" 
that Microsoft Corp. engineers 
had put a "secret password" 
(back door) into several versions 
of Microsoft's Internet server 
software. The supposed pass- 
word ("Netscape engineers are 
weenies" spelled backward) 
allegedly "could be used to gain 
illegal access to hundreds of 
thousands of Web sites," accord- 
ing to the AP, which painted a 
picture of crackers getting "a 
road map to such things as cus- 
tomer credit card numbers." 



Microsoft issued a bulletin 
advising customers to delete 
the dynamic link library file 
DVWSSR.DLL from several 
versions of its Internet server 
software (www.microsoft.com/ 
technet/security/bulletin/msOO 
025.asp). 

Steve Lipner, manager of 
Microsoft's Security Response 
Center, was quoted as saying 
back doors were "absolutely 
against" Microsoft policy — a 
"firing offense" that turned out 
to be more smoke than fire. 
The now infamous "weenie" 
sentence wasn't even a pass- 
word — it was an irresponsibly 
chosen hash string for encoding 
file names for their trip 
between client and server. 

► continued on page 23 



Microsoft Targets 
Embedded Market 
With Renewed Vigor 



BY EDWARD J. CORREIA 

In a step toward making Bill 
Gates' vision of Windows every- 
where a reality, Microsoft is 
again focusing on the embed- 
ded market. With the buzz of 
New Orleans and its Windows 
Hardware Engineering Con- 
ference (WinHEC) in the 
background, the company has 
formed the Embedded and 
Appliance Platform Group, a 
new division that is said to 



provide the cornerstone of the 
company's new three-part em- 
bedded strategy. 

Microsoft has committed to 
giving developers an improved 
organizational structure for all 
of its embedded initiatives, 
an enhanced suite of embed- 
ded operating systems and 
an improved set of licensing 
policies and support services 
for developers. 

► continued on page 15 



EMBEDDED DEVELOPMENT: CURRENT RTOS USE 
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Windows CE r which was the least-used RTOS in 1999, should get help 
from Microsoft's renewed commitment to the embedded platform. 



Debate Over Java Reaches Boiling Point 

Licensees call for control of platform to be open, vendor-neutral 



BY DAVID RUBINSTEIN 

The debate over the future of 
Java is simmering, and in the 
case of at least one important 
critic, it has I 
reached a boil- ANALYSIS 
ing point. While ^^^_^^^_ 
Sun Microsystems Inc. gets 
ready to celebrate Java's fifth 
anniversary at its upcoming 
JavaOne conference in San 
Francisco, its licensees are 
becoming more outspoken in 
their calls for Java to evolve 
into a more open, vendor-neu- 
tral platform. 

At JavaOne, Sun will be 
demonstrating that Java is a 



platform that extends to virtu- 
ally any device with a micro- 
processor and some means of 
connectivity. "Java * s the thing 
that is powering the Net," said 
George Paolini, Sun's vice 
president of Java Community 
Development. "We've become 
mobile citizens of the world. 
We want access not only to 
voice but to data, and 
not only data, but 
dynamic content, and 
I think Java is the 
thing that's making 
this happen." 

Sun says that giving 
up control of Java 
would lead to modifi- 
cations of the source 
code, and ultimately, 
to its fragmentation. Yet small- 
er partners are afraid to bet the 
future of their companies on a 
language and platform whose 
specifications are controlled by 
a single entity — which some- 




times is a competitor as well as 
a business partner. 

Sun has tried to walk this 
fine line with its Java Commu- 
nity Process. Under the JCP, 
Sun has established a partner- 
ship with its licensees to evolve 
and extend the platform, with 
the company making the source 
code available for a licensing 
fee but requiring 
that code modifica- 
tions be done in such 
a way so as to allow 
Sun to retain final 
approval. Sun claims 
that its policies pre- 
vent fragmentation 
of a maturing plat- 
form. Its licensees 
say this allows Sun to 
maintain too tight a grip on 
technology that is fast becom- 
ing, in Sun's own words, the 
power of the Internet. They 
claim that Sun's licensing 
► continued on page 16 



SILVERSTREAM 

MOVES INTO 
XML COMMERCE 

BY ALAN ZEICHICK 

Perhaps best known for its 
SilverStream Application Serv- 
er, SilverStream Software Inc. 
used its annual user conference 
as the platform to begin an 
aggressive campaign to extend 
its product family into the elec- 
tronic business software market. 
At the Worldwide User 
Conference, held mid-April in 
Washington, D.C., SilverStream 
(www.silverstream.com) intro- 
duced its new slogan, "The 
ePlatform Company," which 
also represents its collection of 
present and future e-business- 
related products. The new 
products, currently under de- 
velopment, are an application 
framework for building com- 
merce-related Web portals, an 
e-commerce-oriented server 
and business rules designer. 

► continued on page 30 



David Warthen, Chief Technology Officer, Ask Jeeves 

"One of our biggest challenges was to take something that's 
really hard to build -natural language Web querying-and 
disguise the complexities to make it easy to use." 
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RATIONAL EMBRACES E-BUSINESS 

PRODUCT UPDATES EMPHASIZE WEB-BASED DEVELOPMENT 



BY DAVID RUBINSTEIN 

Rational Software Corp. is 
blitzing the software commu- 
nity with a dozen product 
upgrades that showcase the 
company's new emphasis on 
Web application development. 
The releases, announced May 
1, mark the second phase of a 
three-pronged effort to accel- 
erate Rationale transition into 
the arena of development for 
e-business. 

"We have focused on things 
that increase speed and quali- 
ty in application develop- 
ment," said Eric Schurr, senior 
vice president of marketing 
and suite products. "Develop- 
ers used to ask if you wanted 
[an application] quickly, or of 
high quality. You can't make 
that trade-off anymore in the 
world of e-development." The 
goal, he said, is fast, high-qual- 
ity products. 

The new releases could be 
divided into three parts: a set of 
best practices that guide busi- 
nesses through the develop- 
ment process, upgraded tool 
sets that Schurr said will unify 
the entire development team 
throughout the project's life 
cycle, and a consulting services 
staff that transfers knowledge 
to a customer's organization and 



increases that customer's profi- 
ciency in development. 

As part of the best practices 
improvements, Rational (www 
.rational.com) has enhanced its 
Rational Unified Process version 
2000 content to deal specifically 
with e-business, such as archi- 
tecture, user-interface design, 
more than 100 tool mentors, 
testing and Web deployment 
guidelines. In addition, Rational 
has included a model for devel- 
opers working within the IBM 
e-business framework, one of 
the first results of last summer's 
partnership agreement between 
the two companies. 

Many of the company's tool 



sets have been improved to 
emphasize Web-based develop- 
ment, Schurr said. For exam- 
ple, AnalystStudio, which in- 
cludes the RequisitePro and 
Rose products, now includes 
prepackaged templates for 
managers performing require- 
ments analysis. The templates 
include a set of typical use 
cases, actor specifications and 
other tools necessary for sys- 
tems definition. Also, Analyst- 
Studio has integrated user 
interfaces of the Rose data- 
modeling tool, the Requisite- 
Pro requirements management 
tool and the ClearQuest defect- 
tracking tool to allow for quick 
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Rational's e-business development blitz involved the upgrading of a dozen 
products, including Rose RealTime Edition. 



and productive systems man- 
agement, Schurr said. 

DevelopmentStudio also 
has been expanded to provide 
practical application of the 
Unified Modeling Language 
(UML), including data and 
Web modeling with Rose and 
round-trip engineering support 
for XML/DTD and Enterprise 
JavaBeans components with 
Rose RealTime Edition. Rose 
RTE supports BEA's Web Logic 
and IBM's WebSphere appli- 
cation servers, with integration 
with IBM's VisualAge for Java 
and Microsoft's Visual J+ + . 
Also, the release includes 
round-trip engineering for 
Windows DNA for developers 
working in C + + and Visual 
Basic. Rose RTE is prepack- 
aged with design templates for 
Microsoft Transaction Server, 
Active Directory Objects, 
Visual C++ and Visual Basic. 
And a new product, Rational 
Component Test, allows devel- 
opers to test their JavaBeans 
before they are integrated into 
a final application. 

Enhancements to Perfor- 
manceStudio, Schurr said, will 
now make it possible to use 
Linux to load-test a Web server. 
This suite includes what Schurr 
termed a "wealth of improve- 
ments" to the technology that 
allows a company to monitor 
and verify the integrity of its 
Web site. TestFactory, an ele- 
ment of the suite, has been 
upgraded from working only on 



Visual Basic applications to 
include all C++ and Java appli- 
cations. Rational also has added 
functionality for code coverage 
analysis and performance pro- 
filing for Java applications, 
according to Schurr. 

To accompany these new 
product features, Rational has 
expanded its services division to 
include more than 1,000 pro- 
fessionals. "We're not a body 
shop organization," Schurr said. 
"We don't do the work. We 
send people on-site, but only to 
get that enterprise's skill level to 
the point where it can function 
most effectively." 

LOOKING FORWARD, BACK 

The above releases represent the 
second phase of Rational's new 
business strategy. The first phase 
was the March rollout of the 
UML-based data-modeling fea- 
tures added to Rose. The third 
phase, which Schurr would not 
yet discuss in detail, is planned 
for unveiling in late May. 

Schurr said Rational's strate- 
gy is part of a continuing transi- 
tion toward Web-based devel- 
opment. He said 80 percent of 
the company's customers are 
from Web-related businesses: 
Thirty-five percent come from 
infrastructure companies such 
as Cisco Systems and Motorola, 
another 35 percent come from 
e-business companies, and 10 
percent come from manufac- 
turers of devices such as PDAs 
and other wireless devices. I 



Leave Those HTML Forms Behind: 
XForms Will Follow You Anywhere 



BY REBECCA ROHAN 

It's a new millennium, and the 
Goodwill truck is coming for 
the white text fields, gray Sub- 
mit buttons and long waits for 
server updates that have been 
the furniture of e-commerce 
since 1993. On April 18, the 
W3C announced the First Pub- 
lic Working Draft of "XForms 
1.0: Data Model," a specifica- 
tion designed to bring powerful 
XML-based back ends to a 
variety of front-end devices, 
from mobile phones to scan- 
ners to printers. 

Mom-and-pop operations 
may still squeeze months or 
even years out of HTML forms 
because weekend Webmasters 
haven't moved from HTML to 
XML — but serious e-business 
players will sign onto XForms 
technology for its more power- 
ful interface support, integra- 



tion with other XML tag sets, 
ability to support more than 
one form per page — and more 
than one page per form — and 
its greater scalability to what- 
ever devices and audiences they 
encounter in their travels in the 
21st century. 

THINK CROSS-DEVICE 

"If you want to order cinema 
tickets, you should be able 
to do so on a browser, on a TV 
and over a mobile phone," said 
Josef Dietl, vice president 
of marketing for Stack Over- 
flow AG (www.mozquito.com), 
maker of the XHTML author- 
ing tool Mozquito Factory. 
"Currently, you would use 
WML [Wireless Markup Lan- 
guage] for mobile forms, 
HTML for browsers and so 
on — it becomes fairly expen- 
sive," said Dietl. Besides 



development costs, current 
forms technology can cost you 
in customer goodwill. "If I 
tried to book a movie ticket 
for the 35th of May, I'd get a 
warning that that's not a valid 
date," said Dietl, "but the data 
would have to go back to the 
server first to find out it's an 
invalid date." With XForms, 
the date validation would 
occur on the client side. "The 
feedback is more involving 
when people spend less time 
waiting for the server to come 
back to them," noted Dietl. 

XForms splits logic, data and 
presentation into three separate 
issues. The logic layer sets up 
dependencies between fields, 
using a lightweight expression 
syntax, with the option to call 
out to scripts as needed. The 
data layer uses built-in or cus- 
tom data types. The presenta- 



tion layer marks up the form's 
various looks while custom- 
izing such things as dates and 
currencies according to user 
preferences. A data field can 
have multiple presentation 
controls bound to it. 

Since XForms separates 
function and presentation, 
you're "effectively editing 
XML in their browser," said 
Dietl. "You can attach some- 
thing like an XML schema." 
Art people and code people 
can better contribute in their 
native area of expertise. The 
form/function separation also 
promises to make life easier 
for international audiences 
and those with special needs, 
such as visual impairment. 
"Instead of bold text, you 
could have a screen reader 
read louder," said Dietl. 

OVERFLOWING ENTHUSIASM 

"For us, this is an example that 
everybody's contribution can 
shape the Web," said Dietl. 
"Stack Overflow started in 



1998 with four people, and now 
we are really shaping the tech- 
nology — we have two people in 
the [XForms] working group." 
Stack Overflow chief executive 
officer Sebastian Schnitzen- 
baumer and chief technical 
officer Malte Wedel were 
among the authors of the 
XForms spec, although the 
company's Mozquito Factory 
product currently implements 
XHTML-FML (Forms Mark- 
up Language), which uses the 
XHTML 1.0 transitional DTD 
(Document Type Definition). 
"The current working draft is 
the data model, and our tech- 
nology is the presentation," 
said Dietl. XForms may be part 
of the Mozquito Factory 
authoring environment by the 
end of the year. 

You can comment on the fur- 
ther development of XForms 
by joining the XForms public 
mailing list. Send an e-mail 
to www.forms.request@w3.org 
with the word subscribe in the 
subject header. I 
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MAKING CROSS-PLATFORM INSTALLATION EASIER 

IBM r InstallShield join forces to co-develop next-generation interface 



BY EDWARD J. CORREIA 

Windows developers take soft- 
ware deployment for granted. 
Thanks to an alliance between 
IBM Corp. and InstallShield 
Software Corp., non- Windows 
programmers may soon share 
the same luxury. The two com- 
panies have joined forces to 
develop InstallShield Java Edi- 
tion 4.0, a platform-indepen- 
dent installation authoring solu- 
tion designed to ease the pains 
of cross-platform installation. 

Deploying a Windows appli- 
cation "is not something most 
people think about," said John 
Mclndoe, public relations man- 
ager at InstallShield. "But people 
familiar with installing Unix- 
based software can tell a whole 



different set of tales. They're 
working with shell scripts and tar 
files and things that are far from 
intuitive and customer friendly." 
Installing Unix-based soft- 
ware is very much a part of 
IBM's business. In an effort to 
address some of the complexities 
and make cross-platform devel- 
opment more efficient, IBM 
sought the expertise of Install- 
Shield (www.installshield.com) 
to help them build an installa- 
tion interface for the wide vari- 
ety of products it offers. "We're 
creating an installation program 
that will ultimately look the 
same across multiple products 
and platforms," said Scott 
Handy, IBM's Linux solutions 
marketing director. IBM cur- 



rently develops software for 
platforms as diverse as AIX, 
AS/400, Linux and OS/2, each 
of which now requires a differ- 
ent installation tool. "The 
installation programs differed 
greatly for these platforms 
depending on the product," 
said Handy, but all will benefit 
from InstallShield's "user-friend- 
ly, Windows-like approach" to 
software installation, he said. 

The main benefactors of the 
new tools will be IBM cus- 
tomers and business partners, 
who will receive a simplified, 
consistent installation method- 
ology for all IBM products and 
platforms, "making it easier and 
less expensive for our cus- 
tomers because their IT staff 



only needs to be trained on one 
install program," said Handy. 

"We're able to provide an 
easy-to-use solution that will 
save money, reduce time-to- 
market and improve the instal- 
lation process," said Dick Sulli- 
van, vice president of solutions 
and integration marketing at 
IBM. "Our work with Install- 
Shield is a big win for our cus- 
tomers and [independent soft- 
ware developers]," who will be 
able to take advantage of the 
installation interface for their 
own cross-platform develop- 
ment efforts. 

Developers using the Install- 
Shield Java Edition receive a 
self-contained, point-and-click 
development environment that 



permits them to reuse installa- 
tion code to create a consistent 
end-user installation experience 
across multiple platforms on a 
single CD. To run the installer, a 
Java Virtual Machine (JVM) 
must be present on the host 
machine, but it can be embed- 
ded along with the installation 
files and launched at run time. 
"That allows developers to lever- 
age specific features and func- 
tionality of a given JVM," said 
InstallShield's Mclndoe — func- 
tionality that can then be passed 
on to the user. 

Availability of InstallShield 
Java Edition version 4.0 is 
scheduled for late this year; 
prices are not yet set. Install- 
Shield sells its current version 
3.0 for between $795 and $995. 
IBM plans to bundle its version 
of the product for free along 
with WebSphere and some of its 
other development products. I 



Sun's Forte Fusion 2.0 Trims EAI Development Time 



BY DOUGLAS FINLAY 

Lifting strategies from the play- 
books of its competitors, Sun 
Microsystems' Forte Division 
has embarked on an aggressive 
campaign into the EAI market- 
place by combining the Exten- 
sible Stylesheet Language 
Transformation (XSLT) specifi- 
cation with a fast business 
process engine to create the 
Forte Fusion 2.0 product suite. 

The new features are de- 
signed to enable less-technical 
developers to create applications 
for companies that need to solve 
the growing dilemma of taking 
customer orders via the Web and 
integrating them into the busi- 
ness back-office infrastructure. 

"Fusion is an integration suite 
enabling companies with large 
portfolios of applications and ser- 
vices, running perhaps 50 appli- 
cations on several operating sys- 
tems and several relational 
databases, to take these disparate 
applications and permit them to 
participate in a services-oriented 
architecture that provides ser- 
vices or products to the con- 
sumer," said Drew Engstrom, 
product line manager for Sun. 

He said the way to enable 
full integration of all applica- 
tions is to require them to speak 
in XML. "XML becomes the 
canonical structure for exchang- 
ing data and process informa- 
tion," he said. 

Accordingly, a central feature 
of release 2.0 is XSLT, an 
XML style sheet specification 
approved by the World Wide 



Web Consortium in September 
1999. Aside from providing 
more data transformations such 
as math calculations, field links 
to combine two different fields 
into a new field and providing 
external table lookups, XSLT 
enables departments — and busi- 
ness partners — using different 
XML dialects to translate those 
dialects into standard XML or 
any other dialect, said Engstrom. 

"If SAP churns out XML, 
customers' names may be dif- 
ferent, or monetary amounts 
such as deutsche marks have to 
be translated into Euros," said 
Engstrom. "XSLT can do all 
those translations from one 
XML schema to another." 

He added that, like using 
Excelon's recent XSL Stylus 
Editor version 2.0, developers 
could translate XML dialects as 
simply as dragging and drop- 
ping elements into style sheets. 

But while XSLT stands as a 
popular new feature of release 
2.0 — and a strategic differen- 
tiator at present — Engstrom 
claimed 2.0's business process 
engine is the key component. 
"Competitively, the process 
engine is a strong suite," 
Engstrom said, "because it's 
more robust and scalable than 
many in the market." He said the 
process engine supports two 
styles of process automation: one 
in which there is total automa- 
tion, with no human intervention 
of the application required; and 
another, in which human inter- 
vention is involved. "If a person's 



credit has exceeded its limit, an 
authorized person could over- 
ride that limit," he said. 

A key architectural feature 
separates out the different 
domains for developers, he said. 
"A big issue with integration over 
the last few years is that it's been 
done in an invasive way, where 
integrating deep into the API 
layers to replace one application 
can impact on 10 other appli- 
cations," he said. By separating 
out the domains, he said, the 
process domain can decide how 



processes will flow, while the 
integration domain decides 
how integration is handled, and 
so forth. "We're not impacting 
or touching any of the code 
inside the application layers," 
he added. If there's change to 
one business layer, it won't 
impact the other logical layers, 
which greatly reduces time 
when changes are required. 

He said the process engine's 
architecture accesses the data- 
base I/O infrequently, running 
instead as compiled code in 



memory to create a fast, scalable 
engine that handles more than 1 
million transactions per second. 
He said it is available on 11 
different platforms, including 
IBM's S/390 mainframe envi- 
ronment. "With XSLT, we can 
actually reuse some legacy appli- 
cations because we're creating 
an interface that exposes those 
services as XML." 

Expected to be available late 
in the second quarter, pricing 
will start at $10,000 for a single 
Forte Fusion Adapter, and will 
run up to $150,000 for a Forte 
Fusion solution that includes 
the business process engine. I 



WebGain Acquires TopLink 



Web Gain Inc., the spinoff com- 
pany jointly created by BEA Sys- 
tems Inc. and Warburg, Pincus 
Venture Partners, continues its 
shopping spree by buying the 
TopLink product line from The 
Object People Inc. 

TopLink serves as the object- 
to-relational mapping element of 
WebGain's integrated develop- 
ment environment, Studio suite. 
In March, WebGain acquired 
Tendril Software Inc. to incorpo- 
rate Tendril's StructureBuilder 
into the suite. Other pieces of the 
suite are WebGain's Visual Cafe, 
acquired from Symantec Corp., 
and Macromedia Inc.'s Dream- 
weaver HTML authoring tool. 

Joe Menard, appointed as 
chairman and CEO of Web- 
Gain on April 21, said, "We had 
licensed TopLink but had not 
finished the acquisition by the 
time we wanted to launch Stu- 



dio." He would not disclose the 
terms of the acquisition, as 
WebGain is a privately held 
concern, but did say TopLink's 
management team will be kept 
on at WebGain, as will some 
sales and marketing people. In 
a move separate from the Top- 
Link purchase, BEA acquired 
the consulting and educational 
arms of The Object People, 
which were not related to the 
TopLink product line. 

TopLink, like Visual Cafe, will 
continue to be sold separately as 
well as part of WebGain's Studio 
suite, which, Menard empha- 
sized, supports multiple plat- 
forms from the iPlanet Sun- 
Netscape alliance and Oracle 
Corp., as well as BEA's WebLog- 
ic application server. The reason 
for multiple platforms, Menard 
explained, is that as Java 2 Enter- 
prise Edition (J2EE) becomes 



more prevalent, a volume server 
platform market will develop, 
and WebGain wants to be in a 
position to exploit that growth. 

Menard said that WebGain 
(www.webgain.com) is looking 
at other technology areas for 
potential licensing and partner- 
ship agreements, but said noth- 
ing is definitive at this point. 
"We can do component con- 
struction," Menard said. "Now 
we're looking at assembling 
components into applications, 
and capturing business pro- 
cesses" to develop customized 
applications, he added. 

Menard, who had served as 
interim CEO since the compa- 
ny's inception in January, takes 
the helm at WebGain after four 
years at BEA, where he most 
recently held the position of 
president of the e-commerce 
server division. I 
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RED HAT'S CTO: LINUX WILL NOT FRAGMENT 




News Briefs 





If you're looking for accord on 
the issue of Linux fragmenta- 
tion, you may as well be talking 
about religion or politics. One 
side claims that with so many 
companies developing cus- 
tomized Linux solutions, the 
platform cannot help but fork 
because not all developers are 
willing to share their develop- 
ments for free. Such dissension 
forces application developers to 
modify their code to run on all 
of the forks, similar to the fate 
suffered by Unix. 

On the other side 
is Red Hat Inc. 
(www.redhat.com), 
which essentially 
gives away its version 
of Linux for free and 
generates revenues 
by selling services to 
those building solu- 
tions around its pro- 
ducts. But like many Linux, by design, 
mainstream Linux makes fragmentation 
suppliers, Red Hat is impossible, said Red 
developing improve- Hat's Tiemann. 
ments to the kernel 
in an effort to set its product 
apart, which skeptics say will 
destroy the platform. Chief tech- 
nical officer Michael Tiemann 
explained why his company does 
not believe Linux will fragment. 

SD Times: There are many com- 
panies developing improve- 
ments for Linux, which effec- 
tively splits the operating 
system into different distribu- 
tions. Doesn't this defeat the 
purpose of open source? 
Michael Tiemann: The answer is 
not really. Presently, none of the 
major Linux distributors are stu- 
pid enough to distribute a devel- 
opment kernel. There are two 
code forks of the kernel, and this 
is by design from [the] early 
days. There is something called 
the stable fork, which has been 
frozen and tested, and a very 
honored and respected person 
has said, "This is the stable 
branch." And then there's the 
development branch, which goes 
forward at a breakneck pace. 
There have been as many as 
three releases of a development 
kernel in one day. The develop- 
ment kernel averages a new 
release every one to two weeks. 
All Linux developers have equal 
opportunity to have their patches 
reviewed for the development 
kernel. All Linux developers 
also have equal opportunity to 
have their patches applied to the 
stable branch. But the stable 



branch never accepts new devel- 
opment work, only bug fixes. 
New development work always 
goes into the development tree. 
This large number of Linux 
developers at Red Hat doing ker- 
nel development are working in 
concert with the rest of the com- 
munity on the development 
branch. So you can imagine that 
with new releases coming out 
every week, if we went and did 
our own fork — if our developers 
could not synchronize with the 
other developers — we'd 
all fragment within a 
week. There's no sense in 
forking on that branch. 
So, when do the features 
that come out of the 
development branch get 
put into the stable fork? 
When Linus Torvalds 
and Alan Cox agree the 
development branch is 
finished and should be 
turned into a stable 
branch, at which point a 
new development branch 
is created. . . 
...which includes the new capabil- 
ities created in the old develop- 
ment branch? 

Yes. Right now the main num- 
ber of the development branch 
is called 2.3. When a kernel 
named 2.4 is announced, that 
effectively freezes the stable 
branch and a 2.5 [development] 
branch will be opened. 
So the stable branch and the 
development branch are one and 
the same at the moment the new 
stable branch is announced? 
Yes. Then the development 
branch leaps ahead. And it may 
go off in any one of a number of 
directions. Because you have all 
these people with all these fea- 
tures they all want to implement, 
and it may take months before 
anybody agrees on what the first 
development release should be 
because everyone wants to rip 
out the old and put in the new. 
And there's mayhem. 

But once the first release 
comes out, people all start work- 
ing in more or less [the same] 
direction. And there could be 
three releases in one day; there 
could be one release every three 
days or every two weeks. But it's 
happening so frequently that if 
all the developers didn't cooper- 
ate, the noncooperating develop- 
ers would be two weeks behind 
in two weeks and six months 
behind in six months. And so 
that is what prevents forking of 
the development branch. 



The guy who manages devel- 
opment of the stable branch is 
Alan Cox, and he works for Red 
Hat. So as far as I know, we 
don't have a problem forking 
with the stable branch. 
Well, that might be fine for Red 
Hat, but what about other Linux 
companies? 

Obviously you can't follow the 
idea that everybody has their 
own stable branch maintainer, 
because there can be only one. 
There have been Linux compa- 
nies in the past that have tried 
to go their own way, but [they] 
rapidly marginalize themselves. 
And I think that, by and large, 
any company that does try to do 
this will find themselves being 
marginalized. Everybody is fol- 
lowing the model that [requires] 
changes to the Linux kernel [to 
be] approved. In the scope of 
normal Linux development, the 
well-established methodology is 
"the best code wins." 
Do the same rules apply in the 
embedded space? 
The problem in the embedded 
systems world is that what's best 
for one [hardware] platform 
might be totally out of the ques- 
tion for another. The natural 
forces that induce fragmentation 
in the embedded systems world 
don't really exist in the desktop 
or server world, in part because 
even though desktop and servers 
are different systems, they 
[have] much more [in] common 
than embedded systems do. So, 
the approaches that people were 
taking last year were to hand- 
manipulate the Linux configura- 
tions. Any time you have a man- 
ual process for modifying code, 
you wind up with unique and 
unreproducible results. 
How does Red Hat's embedded 
Linux API address that problem? 
The idea of EL/IX was to pro- 
vide a standard API with stan- 
dardly defined sets of function- 
ality, which could then be 
manipulated by configuration 
tools. So the idea was that by 
having configuration sets and 
configuration interfaces defined 
for Linux, you could have per- 
fectly reproducible results with 
any Linux distribution. 

I read this great interview 
with [Transmeta Corp. CEO] 
Dave Ditzal and Linus Torvalds 
about the [Crusoe] chips, and 
Dave made the comment that 
"gravity is on their side." That 
describes how I feel about 
using automatic configuration 
vs. manual. -Edward J. Correia 



COMPANIES 



Rogue Wave Software Inc. has adopted a corporate 
branding strategy, E-commerce E-ssentials, that reflects 
the company's repositioning as a developer and reseller Kuw WEVf 
of components and solutions for building customized e- 
commerce applications. The key to the company's strategy will be the 
delivery of new XML, Java and C++ products that facilitate the devel- 
opment, integration and enhancement of e-commerce systems . . . 
StarBase Corp. has acquired ObjectShare Inc., a provider of object- 
oriented solutions as well as consulting and training services, for about 

Jb _ $8.84 million. Each ObjectShare shareholder will 

*i Stars BBS 

— *- receive 0.09172 shares of StarBase common 

stock for each share of ObjectShare common stock. StarBase will issue 
1,211,983 shares of StarBase common stock to ObjectShare share- 
holders . . . Soft Quad Software Ltd., a developer of XML-enabling tech- 
nologies and commerce solutions for e-business, has launched the 
XMetaL Quick Start Program. XMetaL is an advanced XML authoring 
solution that delivers ease of use to authors, while shielding them from 
the complexities of XML. A word-processorlike environment makes 
XMetaL a broadly deployable solution that reduces training and imple- 
mentation costs, the company said. The cost of the program is $10,000 
. . . Intelligent Medical Objects Inc., a developer of medical applica- 
tions and vocabulary management, has sold its database analysis soft- 
ware, Virtual DBA, to Quest Software Inc. 
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Inprise/Borland is making available Midas 3, 
middleware technology and components for 
i 1 1 1 ■ rapidly building Delphi and C++ Builder Inter- 



WIdas 



net applications, the company said. Now supporting XML and 
dynamic HTML, Midas 3 increases scalability and flexibility of large- 
scale Internet applications, it was reported . . . Continuus Software 
Corp. has begun shipping Continuus Change Management (CCM 5.0) 



CONTINUUS" 



supporting Red Hat Linux 6.1. CCM 5.0 
is also available on Windows 9x/NT/ 
2000, Solaris, HP-UX, AIX, TRU64 Unix and Irix . . . Symantec Corp. 
has expanded its Norton Antivirus security application to scan and 
analyze files in the ELF file format-the format used by the Linux plat- 
form . . . Intuitive Systems Inc. is shipping its Java performance pro- 
filing tool, Optimizeit 3.1 Professional, for Linux, allowing developers 
to test and improve the performance of Java applications, applets, 
servlets and JavaBeans . . . BEA Systems Inc. has added the eLink 
Information Integrator, a tool for transforming and routing complex 
data between enterprise applications, to its eLink Integration Server. 
Information Integrator provides core-enabling technology for compa- 
nies to leverage critical business information across front- 
and back-office applications, according to a company statement . . . 
WIBU-Systems has improved the installation procedure of WIBU-KEY 
I II D I I in vers ' on 2 * 53 and made it easier to implement, the 
LJI DU company announced. The WIBU-KEY Runtime-Kit Set- 
9YSTEM9- U p has integrated the five installation programs into 
one compact program . . . Servertec has upgraded its iServer middle- 
ware Java servlet server to include the Java Servlet API version 2.2. 
The upgrade, version 1.8.0, now provides developers with multiple 
servlet contexts, enabling groups of servlets to share common infor- 
mation. Also included in the upgrade are API changes, bug fixes and 
updates to documentation. 
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Software Emancipation Technology Inc. has appointed 
William Jones as vice president of business development. 
Jones will report to Dave Champagne, president and CEO. 
Prior to joining SET, Jones was director of eastern area 
sales for Seagate Software, a developer of network, sys- 
jones tern-management and storage solutions targeting the For- 
tune 500 marketplace . . . John Blaine has been named executive vice 
president at Corel Corp. Blaine comes to Corel from Sterling Commerce 
Inc., where he most recently served as vice president and controller. I 
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t's amazing how fast e-Business applications get to 
market when you work with SQL Anywhere Studio. 
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Get to market faster than ever. SQL Anywhere® Studio leverages open industry standards so you aren't locked into any 
one vendor or system structure. You can drive new markets, too. SQL Anywhere lets you develop data management 
applications for everything from workgroups and laptops to handhelds and intelligent appliances. And bidirectional data 
synchronization between these devices and enterprise systems using wireless, Internet and email protocols enables 
access to e-Business information anywhere, anytime. With more than 5 million seats of SQL »_? 
Anywhere at work today, Sybase is the clear choice for helping you deploy e-Business | _^ \ OVvNH, 

solutions anywhere. Fast. Call 1-800-8SYBASE, orvisitwww.sybase.com/sql_anywhere. www.sybase.com 

©2000 Sybase, Inc. All rights reserved. All trademarks are the property of their respective owners. 
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J2EE DRAFTS ON TAP AT JAVAONE 

Specs likely to be made public at fifth-anniversary conference 
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BY CATHERINE EHR 

JavaOne, which claims to be the 
largest developer conference on 
the planet with more than 
20,000 attendees in 1999, is cele- 
brating its fifth anniversary with 
its biggest show ever. This year, 
the conference and show are tak- 
ing over the entire 1.2 million- 
square-foot Moscone Conven- 
tion Center in San Francisco for 
five days, from June 4 to 9. 

According to Bill Roth, Sun 
Microsystems Inc.'s group 
product manager for Java 2 
Enterprise Edition (J2EE), 
there is "a good possibility" that 
public drafts of Sun's J2EE 
specifications will be available. 
"We hope the expert group fin- 
ish their work," Roth said. 
"That starts the [community] 
process." Roth said it is like- 
ly the component technology 
specifications, for Enterprise 
JavaBeans and servlets, will be 
ready. As for the platform spec- 



ifications, Roth said there is 
ongoing "vigorous debate that 
may delay it." 

The goal of this year's show, 
which is composed of the 
JavaOne Conference, the 
JavaOne Pavilion and Java Uni- 
versity, is to provide Java pro- 
grammers and software devel- 
opment managers with the 
latest knowledge, technology 
and tools in Java development. 

JAVAONE CONFERENCE 

The conference proper will run 
from Tuesday, June 6, through 
Friday, June 9, with several 
keynote speakers opening the 
day's sessions. 

Individual conference ses- 
sions include lectures and tuto- 
rials from luminaries in Java 
technology development. Top- 
ics cover the full range of Sun's 
Java-related products, includ- 
ing the Java 2 Platform (Stan- 
dard, Micro and Enterprise 



editions), Jini technology and 
the Java technology program. 
Last year there were more than 
600 speakers giving technical 
talks at the conference that also 
featured more than 180 infor- 
mal Birds of a Feather (BOF) 
sessions — numbers that should 
be topped this year. Speakers 
and sessions for this year have 
not yet been disclosed. 

JAVAONE PAVILION 

More than 380 exhibitors packed 
the JavaOne '99 conference 
show floor, demonstrating a wide 
range of applications and de- 
vices. And the conference of- 
fered numerous other special 
interest areas, including a 
"Device Wall" for consumer and 
embedded devices incorporating 
the Java platform; an Enterprise 
JavaBeans technology "deploy- 
athon"; and "Tank Wars," which 
used Java technology to operate 
remote-controlled toy tanks. 



Look for more such innovative 
uses of Java at this year's Pavilion. 
There will be a special Pavilion 
Preview on Monday night from 5 
p.m. to 8 p.m. 

Java University, a series of 
one- and two-day intensive 
training courses in Java develop- 
ment, is designed as an educa- 
tion-oriented, technical-training 
complement to the JavaOne 
Conference. It's aimed at skilled 
Java technology, structured 
and object-oriented developers, 
ISVs, architects and consultants. 
Sessions are held on the Sunday 



and Monday preceding the 
opening of the conference. 

The keynote presenter of this 
year's general session at Java 
University is Bill Joy, Sun's chief 
scientist. This presentation will 
be held Monday at 8 a.m. Train- 
ing sessions follow the keynote, 
beginning at 10 a.m. 

Jim Waldo, Sun's lead archi- 
tect for Jini technology, will 
deliver the keynote at this year's 
Jini technology session, held on 
Sunday at 8 a.m. The Sunday 
training sessions also are sched- 
uled to begin at 10 a.m. I 



JAVAONE Z000 CONFERENCE www.java.sun.com/javaone 

Thursday, 7 a.m. -6 p.m. 
Friday, 7 a.m. -Noon 



Conference: June 6-9, 
Moscone Convention Center, 
San Francisco 
Java University: June 4-5, 
Moscone Convention Center 

KEYNOTE (JAVA UNIVERSITY): 

Bill Joy, Sun's chief scientist, 
Monday, 8 a.m. 

JAVAONE CONFERENCE 
REGISTRATION & HOURS: 

Tuesday, 6:30 a.m.-8 p.m. 
Wednesday, 7 a.m.-6 p.m. 



JAVAONE PAVILION HOURS: 

Monday, 5 p.m.-8 p.m. 
(Special Pavilion Preview) 
Tuesday, 10:30 a.m.-8:30 p.m. 
Wednesday, 10:30 a.m.-6 p.m. 
Thursday, 10:30 a.m. -4 p.m. 

JAVA UNIVERSITY HOURS: 

Sunday training sessions, 

10 a.m. -6 p.m. 
Monday training sessions, 

10 a.m.-5 p.m. 



Pushing the Java Applications 

KL Group's servlet deploys, updates applications in real time 

person had an old version of development tool set; a 



BY DAVID RUBINSTEIN 

In a move designed to help 
development managers con- 
trol software distribution 
across multiple platforms, KL 
Group Inc. this month expects 
to release DeployDirector, a 
100% Pure Java servlet for the 
management of client-side 
applications and applets. 

Jeff Zado, product manager 
at KL Group (www.klgroup 
.com), cited a report that 
shows the cost of deploying 
software to 5,000 PCs at 
25 remote locations to be 
$527,500— factoring in costs 
of distribution, installation and 
help desk, as well as tracking 
the updates, time delay in get- 
ting new versions and fixes to 
end users and installing and 
updating the Java Virtual 
Machine (JVM) on which the 
application runs. 

Zado said DeployDirector 
can deploy applications to 
thousands of users anywhere 
via a browser interface, using 
industry-standard protocols to 
provide the updates. 

"Lets say a company has 
developed an internal sales 
application," Zado explained. 
"The salespeople, who are at 
remote locations, connect to a 
database. Well, what if a sales - 



the application? Maybe prices 
had changed, and no IT per- 
son was there to update him. 
He'd be working with the 
wrong information." 

DeployDirector, Zado said, 
updates the application on the 
server and can either send a 
message to the end user to get 
the update, or the update can be 
done automatically and silently. 

With the use of Java on the 
enterprise level growing rapid- 
ly, Zado said, DeployDirector is 
designed specifically to manage 
multiple Java applications that 
might have different JVM 
requirements, allowing compa- 
nies to use new JVM versions 
for development while ensuring 
that applications developed 
with previous JVMs will contin- 
ue to run correctly. What all 
this does, Zado said, is to free 
up time for developers to work 
on business projects instead of 
trying to write deployment 
solutions, and allows enter- 
prises to use applications they 
hadn't been able to in a cost- 
effective manner. 

The deployment solution is 
an extension of KL Group's 
position in the Java communi- 
ty, Zado said. KL Group's 
products include JProbe, a 



JClass, a family of 100% Pure 
Java certified JavaBeans. 

DeployDirector supports 
any server that can run a Java 
servlet, including Solaris, Win- 
dows NT/2000, HP-UX, AIX 
and Linux. The supported 



clients are Windows 95x and 
Solaris, with support for JDK 
1.1 and higher. It requires 
6MB on the server and 600KB 
on the client. 

The starter kit, which 
includes a packaging component 
that creates Java archives (JARs) 
specific to the client's applica- 
tions, is priced at $20,000 for 
one server, 100 clients and three 
days of instruction. 



KL GROUP ADDS SUPPORT 
FOR BEA'S WEBLOGIC 

KL Group and BEA Systems 
Inc. have partnered to deliver 
KL Group's JProbe Suite of 
Java performance analysis tools 
in conjunction with BE As 
Web Logic Server 5.1. 

It is available now, at $1,899 
for a single developer license. 
Support for WebLogic 5.1 is at 
www.klgroup.com/jprobe/bea. I 



Coming Down From Their Tower 

JVM vendor sets up on-site performance teams 



BY DAVID RUBINSTEIN 

Surrounding the launch this 
month of its TowerJ 3.5 Java Vir- 
tual Machine, Tower Technolo- 
gy Inc. has secured a new round 
of financing and, under the 
leadership of its new CEO, is 
revamping its corporate strategy. 

"We've changed our business 
model. We're moving toward 
direct sales to IT managers run- 
ning those big server farms," said 
John Gustafson, who became 
Tower's CEO on Feb. 1. "Our 
economic benefit to customers is 
Twice the performance for one- 
fifth the price.' Instead of spend- 
ing $20,000 on five new servers, 
spend $5,000 on our software." 

Indeed, under Tower's Per- 
formance Improvement Quick 
Start program, if a Tower e-Per- 
formance Consultant can get a 
customer's application to run 



twice as fast, the cost is $5,000, 
according to Gustafson. If they 
can get it to run three times as 
fast, the cost is $10,000. If they 
fail to achieve the desired rate of 
performance, though, there is 
no charge for the service. 

Tower (www.towerj.com) is 
taking this rapid-response 
approach to its customers, but 
also is seeking to get involved at 
the beginning of the develop- 
ment cycle during application 
architecture and assessment, 
Gustafson said. "We have the 
skills in performance optimiza- 
tion techniques," he said, point- 
ing to the fact that in the past 
four Volano Benchmark reports, 
TowerJ has been the leading 
JVM in terms of performance. 

Gustafson said TowerJ is a 
post-compiler being positioned 
as a deployment optimization 



solution, offering benefits of 
reduced complexity of manag- 
ing Java components and 
applets, thereby reducing costs 
of deployment. The significant 
upgrade in version 3.5 is that it 
now supports Java 2 Enterprise 
Edition (J2EE). 

Gustafson added that Tower 
could partner with system man- 
agement vendors such as Com- 
puter Associates, Segue or 
BMC. "It's where we fit in the 
life cycle," he explained. "The 
beauty of what we have is the 
ability to develop on a single 
platform and develop on all 
eight platforms we support. 
That's attractive to large, multi- 
vendor environments." 

Gustafson joined Tower 
from New Venture Associates, 
where he was an executive man- 
agement consultant. 

Under the financing plan, pri- 
vately held Tower would get a 
$1.2 million cash infusion. Clos- 
ing terms were not available. I 
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DEVELOPERS WILL WRITE TO WINDOWS 2000, SAYS SURVEY 



Windows 2000's time has 
apparently arrived for a majori- 
ty of developers. That's the con- 
clusion of an informal survey 
conducted by catalog merchant 
Programmer's Paradise Inc. at 
the SD 2000 Conference and 



Expo in San Jose in March. 

Of approximately 600 devel- 
opers interviewed for the 
Programmer's Paradise [www 
.pparadise.com] survey 72 per- 
cent said they would be writing 
to the latest version of the Win- 



dows operating system within 
the next year. Twenty- eight 
percent said they would begin 
deployment within three 
months, 25 percent said they 
would begin deployment with- 
in six months, and 19 percent 



said they would deploy it with- 
in 12 months. 

Contrast this to information 
culled from the survey that said 
only 41 percent of developers 
expect their employers to 
implement Linux within the 



Only one company 
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$40 billion of software. 
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next year. Indeed, 59 percent of 
developers said they either 
would not implement Linux (39 
percent) or were undecided as 
to whether to do so (20 percent). 

The informal survey offered 
no analysis as to how these 
results might reflect on or sig- 
nificantly impact the growth of 
the Linux developer base or of 
Windows 2000. 

The survey also found that 
69 percent of the 600 develop- 
ers interviewed had purchased 
development tools online, ex- 
cluding shareware. I 



BroadVision 
Buys Interleaf 



In a deal estimated to be worth 
$877 million, BroadVision Inc. 
has acquired XML content 
management company Inter- 
leaf Inc., and named former 
Interleaf CEO Jaime Ellertson 
to the newly created position of 
chief strategy officer. 

BroadVision's One-to-One 
Enterprise — its signature suite 
of e-business components that 
includes a shopping cart, plus 
banking, billing and knowledge 
management applications — has 
been updated with Interleaf's 
technology, putting "our unique 
spin of XML" into the mix, 
Ellertson said. 

"BroadVision provides a way 
to personalize the Web," Ellert- 
son said. "You'll be less success- 
ful without personalization." 
BroadVision provides a rules- 
based engine and profiling for 
personalization, he explained. 
"They can serve up large 
amounts of data over the pipe," 
he said. "Now, with XML as the 
environment of e-business, it's a 
direction they wanted to go in." 

XML Connection, which 
binds Interleaf's BladeRunner 
with BroadVision's One-to-One 
into an XML-based content 
management tool, was released 
30 days after the purchase 
agreement was announced in 
January, Ellertson said. It is in 
rough implementation now. 

In his new role as chief strate- 
gist, Ellertson said the company 
will continue to look for acquisi- 
tions in the service area, as well 
as at wireless and core technolo- 
gy areas that could "give us sub- 
stantial differentiation," he said. 

Ellertson said the largest 
potential market for Broad- 
Vision (www.broadvision.com) 
is wireless devices, as XML is 
the foundation for Wireless 
Markup Language (WML). I 
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VenturCom API Makes Windows CE Apps Portable 

Free application programming interface enables ports to Windows NT r NT Embedded 



BY EDWARD J. CORREIA 

The inability to port their appli- 
cations to other operating sys- 
tems has long been a drawback 
to Windows CE developers — 
until now Windows NT Embed- 
ded pioneer VenturCom Inc. has 
released the RTWinAPI, a Win- 
dows CE 3.0-compliant applica- 
tion programming interface that 
for the first time permits devel- 
opers to port their CE applica- 
tions to Windows NT or NT 
Embedded simply by recompil- 
ing, according to the company 
The one caveat is that the target 
platform must run the company's 
real-time extensions. 

"This is the only solution on 
the market offering any kind of 
portability between CE and 
NT," said Roy Kok, vice presi- 
dent of marketing at Ventur- 
Com (www.vci.com). "This is 
true because part of the solution 
involves making NT behave like 
CE. The RTWinAPI identifies 
the group of Windows CE func- 



tion calls that we felt were most 
appropriate for real-time devel- 
opment, and it mirrors them on 
top of our technology inside of 
Windows NT." 

VenturCom develops and 
markets RTX, a set of real-time 
extensions for Windows NT and 
NT Embedded, giving either 
operating environment the 
benefits of real-time opera- 
tions. RTX adds a proprietary 
scheduler to Windows NT that 
can preempt the NT scheduler 
at any time. This gives real-time 
developers using VenturCom's 
development extensions with 
Microsoft Studio the ability to 
prioritize their mission-critical 
software and make Windows 
NT behave more deterministi- 
cally, Kok said. 

Developers of Windows CE 
applications will experience vir- 
tually no transition time to begin 
using the API because it includes 
only existing function calls. 

According to Kok, develop- 



ers will be able to leverage the 
wealth of applications and 
resources available with NT 
Embedded. "There are tons of 
software developed for 
the Win32 world, and 
people are wanting to 
leverage Windows tech- 
nology any place they 
can," he said, describing 
the flexibility afforded by 
developing to a common 
platform. "In the indus- 
trial control marketplace, 
they need to have con- 
nectivity from robots and 
machine controls out on the 
plant floor to the IT systems in 
the front office, updating inven- 
tory and tracking projects." 

And when enhanced with 
RTX, Windows NT offers devel- 
opers more flexibility and con- 
trol of their programs, includ- 
ing the ability to directly access 
the hardware. "Windows NT 
has a pretty complicated driver 
model that has been viewed as a 



.h - . 



RTWinAPI makes 
NT work like CE, 
according to 
VenturCom's Kok. 



WHERE MAINFRAMES MEET BROWSERS 

Century's HostML r ViewML translate data for Web clients 



BY DOUGLAS FINLAY 

Developers struggling to reuse 
older mainframe host and 
Unix applications within the 
new Web-enabled environ- 
ment may finally get the solu- 
tion they're looking for, thanks 
to Century Software Inc.'s 
unveiling of HostML and 
ViewML programs at Comdex 
Spring 2000 that took place in 
April in Chicago. 

Essentially, with both pro- 
grams running on the desktop, 
HostML accesses mainframe 
applications via terminal emu- 
lation, using screen-scraping 
techniques to capture data, 
translate it into XML and 
stream it to ViewML for re ren- 
dering and ultimate presenta- 
tion onto a Web browser. 

"HostML is a terminal emu- 
lation technology enabling 
developers to run an IBM 3270, 
5250 or Unix-based application, 
such as accounting, behind a 
firewall, using a secure link 
from a Windows NT server, and 
produce a DTD [Document 
Type Definition], storing it in an 
XML stream," said Greg Haerr, 
CEO of Century Software 
(www.centurysoftware.com). 



"That XML [data] is then 
stored in disk files or piped over 
to the ViewML program, or 
client, which rerenders the 
XML data for the browser," 
Haerr continued. ViewML sup- 
ports Linux, Windows CE, 
PalmOS, Java and ActiveX. 

Haerr said the new Web 
environment quickly pervading 
the industry has given rise to 
developers who think specifi- 
cally in terms of XML technolo- 
gies and applications. "We've 
got XML databases we can now 
access with ease," he said, "but 
what is less available now is 
access to nondatabase applica- 
tions," such as those on Unix 
and mainframes. 

Using HostML, he said de- 
velopers could expect to bring 
legacy applications to the desk- 
top without the need to know 
terminal emulation programs. 

Of equally compelling inter- 
est to developers will be the 
open- source implementation of 
MicroWindows included in 
ViewML, which enables de- 
velopers to further port those 
legacy applications into smaller 
devices and systems, such as 
those running Linux, embed- 



ded Linux and the Wireless 
Application Protocol. 

An open-source project con- 
ceived and built by Haerr, and 
available for download at www 
.microwindows.org, MicroWin- 
dows is a "graphical run-time 
[environment] for Linux, em- 
bedded Linux, the PalmPilot and 
other new-age systems," he said. 

He said ViewML sits on top 
of MicroWindows, which pro- 
vides all the graphics routines 
using smaller memory space to 
run on the smaller devices. "Oth- 
erwise," he continued, "develop- 
ers would have to run X- Window 
servers, which take up to an 
8MB footprint." 

In addition, he said develop- 
ers could use MicroWindows to 
add a number of applications on 
top of their own programs. 
"Developers can render for their 
own needs. If a developer want- 
ed an e-mail client on top of 
ViewML, he could add it," 
Haerr said, because MicroWin- 
dows supports such activity. 

Both the HostML terminal 
emulator and ViewML reren- 
derer are slated to be released 
in August. Pricing has still not 
been determined. I 



negative by developers, [who] 
like to be able to write applica- 
tions that can access hardware 
directly. Windows NT doesn't 
allow that," said Kok. 

Real-time developers 
increase program relia- 
bility when writing to the 
separate NT scheduler in 
RTX, which can continue 
operating when NT does 
not. "We've all seen the 
Windows NT 'blue 
screen,'" he said. "If I 
have a software program 
running with Ventur- 
Com technology, that program 
will continue to operate even if 
Windows NT blue-screens. And 
that's really important to critical 
applications." The API is avail- 
able now for free download at 
www.vcicenter.com. 

VENTURCOM KICKS OFF 
VALIDATION PROGRAM 

VenturCom has launched its 
hardware validation program, 
with Dynatem Inc. the first in 
line. A maker of stand-alone 
embedded hardware systems, 
Dynatem (www.dynatem.com) 
signed on to allow VenturCom 
to test its hardware and certify 
that it is compatible with its 
intended Microsoft operating 



system. VenturCom hopes the 
agreement will be the first of 
many, with industrial computer 
maker Versalogic Corp. likely to 
be next, the company said. 

"Hardware companies have 
too much to learn to be able to 
support all the different operat- 
ing systems," said Kok. So Ven- 
turCom developed a program to 
partner with hardware compa- 
nies in an effort to validate their 
hardware as appropriate for 
either of the Microsoft operating 
systems: NT Embedded or CE. 

But the program goes beyond 
validation. "We'll even build a 
target for that particular hard- 
ware platform so customers have 
a good 'out-of-box' experience. If 
they have a customer that wants 
to use their particular hardware 
with Windows NT Embedded, 
VenturCom will have a target 
built for that particular platform 
and the customer won't have the 
learning curve associated with 
buying a piece of hardware 
[from one vendor], going to 
somebody else to buy a piece of 
software, and figuring out how it 
all works together," he said. 

VenturCom also can provide 
OEMs with the licensing neces- 
sary for selling devices based on 
Microsoft embedded systems. I 



Applied to Make CodeTest For 
MontaVista Embedded Linux 



In response to developer cries 
for better testing tools for 
embedded Linux applications, 
Applied Microsystems Corp. is 
partnering with MontaVista 
Software Inc. and will integrate 
its CodeTest debugging suite 
with Hard Hat Linux, Monta- 
Vista's brand of Linux for 
embedded systems. 

Developers now will have 
access to a set of tools specifi- 
cally designed for perfor- 
mance and memory analysis, 
code coverage and instruction 
trace, according to Mike 
Byron, manager of corporate 
communications at Applied 
(www.amc.com). "These sig- 
nificantly impact delivery and 
performance quality of devel- 
opment of applications for 
embedded hardware systems 
using Linux," he said. 

Under the terms of the 
agreement, MontaVista (www 
.mvista.com) customers in 



need of the tools will contact 
Applied to purchase Code- 
Test, which has been certified 
to work within the MontaVista 
environment. "We are ex- 
tremely impressed with the 
integration and functionality 
CodeTest offers the embed- 
ded Linux developer," said Jim 
Ready, president and CEO of 
MontaVista, based in Sunny- 
vale, Calif. 

Hard Hat Linux and its 
accompanying development kit 
are optimized for embedded 
applications and targeted at 
Internet appliances, communi- 
cations devices and mobile 
computing systems that incor- 
porate x86 and PowerPC 
processors. Suggested retail 
prices for CodeTest suite are 
$4,000 for the software-in- cir- 
cuit version and $12,000 for 
hardware-in-circuit. The tools 
are scheduled to be available 
by midyear. I 
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< continued from page 1 

The new division is a consol- 
idation of the Windows CE and 
Windows NT Embedded devel- 
opment teams and the Server 
Appliances group, and will 
function as a platform provider 
for organizations both inside 
and outside the company. 

The new group will be head- 
ed by Microsoft vice president 
Bill Veghte, former general 
manager of consumer Windows 
products. "Every element of 
this strategy is a response to the 
needs of developers in today's 
supercharged connected device 
industry," said Veghte. 

"We've spent the past couple 
of months focusing on what 
Microsoft really needs to do to 
be competitive and successful 
in the embedded marketplace," 
said Deanne Hoppe, product 
manager of the embedded and 
appliance platform group. But 
despite being available since 
1996, Windows CE has not 
gained much ground compared 
with other commercial RTOSes, 
which one skeptical competitor 
said is not likely to change. 
"Microsoft's track record doesn't 
lead anyone in the industry to 
believe that this new announce- 
ment will go any further than 
Windows CE or Embedded NT 
has," said Bill Weinberg, mar- 
keting director at MontaVista 
Software Inc. (www.mvista.com). 
"It's Microsoft's continuing 
investment in [its] 1 percent of 
the market." 

But according to Hoppe, 
the company is gaining em- 
bedded ground. "We really 
have the largest R&D invest- 
ment in the industry in the 
space, and if you look over the 
past six months, it was the 
most successful six months 
measurable in sales and design 
wins," said Hoppe. 

Hoppe said she is opti- 
mistic about the potential for 
Microsoft in the embedded 
space, citing the company's 
new flexibility. And part of that 
flexibility will be centered 
around Windows CE 3.0, due 
for release in June. The 
update will have the capability 
to let embedded developers 
pick and choose the compo- 
nents they need and scale 
down the RTOS for their 
devices. "In the past, Windows 
[CE] has been thought of as a 
50-pound bag of flour, and you 
had to take the whole bag," 
she said. "We need to break 
that up if we want to be in 



appliances and devices." Win- 
dows CE 3.0 also will feature 
greatly improved determin- 
ism, with an increase in laten- 
cy priority levels from eight in 
Windows CE 2.12 to 256 in 
version 3.0, she added. 

"When customers start to 
consider building a device or 
appliance, they're also asking 
whether they can create a cus- 
tomized operating system that 
delivers just the functionality 
they need — no more, no less," 
Veghte said. "Version 3.0 allows 
developers to be more selective 
when they choose system capa- 
bilities." Developers will be 
able to boil Windows CE 3.0 
down to about 300K, the com- 
pany said. 

The new strategy also in- 
cludes an accelerated launch 
cycle for embedded systems 
following a release of the gener- 
al operating system. According 
to Hoppe, Microsoft would tra- 
ditionally release an embedded 
version of an operating system 
about 12 to 18 months after its 
general release. 

"We are committing to close 
that delta to about 90 days," 
Hoppe said, which she admit- 
ted is aggressive, but added, "I 
think it's something we really 
need to do to be competitive in 
this space." The Windows 2000 
Server Appliance Kit, which 
will enable OEMs to build serv- 
er appliances based on an em- 
bedded version of Windows 
2000, is scheduled for release 
this summer. 

Along with the scheduled 
Windows CE 3.0 launch, Micro- 
soft plans to release a new ver- 
sion of Platform Builder, which 
will now include Embedded 
Visual Tools, the environment 
used to build Windows CE 
applications and new compo- 
nents. A free evaluation version 
will be available for download. 
Prices for the new offerings 
have not yet been set. 

But MontaVista's Weinberg 
sees the move as just another 
Microsoft marketing maneu- 
ver without much substance. 
"Microsoft has made a series 
of grand announcements and 
much less grand product offer- 
ings," he said. "In each case, 
[Microsoft] starts off from an 
'almost-right' position, but 
without the technical and, in 
this case, the marketing smarts 
to carry each of them off. They 
are taking a number of under- 
realized technology thrusts 
and hoping that by winding 
them together they can have a 
viable solution." I 



BSquare Will Be There for Windows CE 3.0 

Tools developer shows new products, upgrades at WinHEC 



BY EDWARD J. CORREIA 

With the Microsoft Windows 
Hardware Engineering Confer- 
ence (WinHEC) as the back- 
drop, embedded tools develop- 
er BSquare Corp. has released 
a bevy of new products and has 
made all of its existing products 
compatible with the forthcom- 
ing release of Microsoft Win- 
dows CE 3.0. 

Among the updated releas- 
es are the Time Critical Exten- 
sion for Windows CE, the real- 
time extension for CE that 
boasts single-digit response 
time; the CEValidator Applica- 
tion Tester, a code-testing util- 
ity that now also includes a 
module for the newly released 
Microsoft Pocket PC operat- 
ing system; and CEValidator 
Platform Tester, which tests 
ports of Windows CE to hard- 
ware and is ready to test func- 
tionality that will be new to 
Windows CE 3.0. 

BSquare also is preparing to 
unveil three new products, two 
of which came along with its 
acquisition of Blue Water Sys- 
tems Inc. earlier this year. 
Scheduled for midyear release 
is WinDK Xpress Kit Suite for 
Windows CE, a set of develop- 
ment tools that will combine 
Blue Water's WinDK device 
driver development environ- 
ment with BSquare's CE Xpress 
board support packages. 

This grouping of features 
"will provide the marketplace 



a complete solution for 
ing up their intelligent 



with 
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devices on Windows CE," said 

Bill Kyle, director of marketing 

for platform technology at 

BSquare. The company also 




BSquare will combine Blue Water's 
tools with its CE Xpress Suite. 

plans to release a version of CE 
Xpress for PowerPC processors 
at the same time. 

Also inherited in the Blue 
Water deal was its WinRT-USB, 
a tool that gives developers the 
ability to control USB peripher- 
als from within their Windows 
applications without using the 
Windows Device Driver Kit. 
The kit will offer support for 
Windows 98, 2000, NT and NT 
Embedded — "every Windows 
operating system except CE," 
said Kyle. The WinRT-USB 
toolkits will support develop- 
ment in Win32 C/C++ and will 
support Visual Basic and other 
application-level development 
environments through an 
ActiveX control. 



Kyle also said that USB- 
related development efforts on 
one Windows platform will be 
portable to others. "What's 
interesting about the approach 
we take is that the source code 
is going to be compatible with 
Window 2000, so if organiza- 
tions decide they want to 
migrate over to Windows 2000, 
they just need to recompile the 
code and they're up and run- 
ning on 2000." 

BSquare is introducing a 
single WinRT-USB developer 
license for Windows 98 and 
2000 for $1,495, which will 
include six months of product 
technical support and free run- 
time licenses. The Windows 
NT and NT Embedded version 
will initially be priced at $1,795 
with support plus 100 free run- 
time licenses. An optional one- 
time buyout program is avail- 
able for $25,000 per peripheral. 
WinRT-USB is scheduled for 
release in May. 

Finally, the company con- 
firmed its embrace of the Blue- 
tooth specification for wireless 
communications between small- 
form- factor devices with a 
demonstration at WinHEC of a 
shopper's assistant application 
running on a Web pad and 
communicating wirelessly with 
a Windows NT server. Blue- 
tooth (www.bluetooth.com) is 
an industry consortium intent 
on driving the development of 
the technology. I 



PERSONALJAVA COMES TO CODEWARRIOR 

Rapid application development tools speed products to market 



The army of developers using 
Code Warrior to build applica- 
tions will have yet another 
platform to add to their ar- 
senal. Metrowerks Corp. has 
unveiled CodeWarrior Personal- 
Java Platform Edition 1.0, 
which puts applications for 
set-top boxes, Internet appli- 
ances and handheld comput- 
ers within easy reach of Code- 
Warrior programmers. 

Adding Personaljava to the 
environment will open up a new 
world of opportunities for Code- 
Warrior developers. "By adding 
support for Personaljava tech- 
nology to CodeWarrior, we are 
providing the Java developer 
community with the tools they 
need to extend Java's cross-plat- 



form benefits to the consumer 
device space," said Luis Quiroga, 
product marketing manager at 
Metrowerks. Personaljava is a 
subset of Sun's Java 2 Micro Edi- 
tion (J2ME), which provides an 
optimized Java run-time envi- 
ronment designed for consumer- 
oriented device solutions. 

Applications created with 
the technology can execute on 
any device on which a Personal- 
Java virtual machine is present. 
Networked devices also can 
access class libraries, giving pro- 
grammers the ability to create 
applications that leverage fea- 
tures of the Java 2 Standard 
Edition. Metrowerks declares a 
following of around 200,000 
developers using its cross-plat- 



form integrated development 
environment, which provides a 
unified C, C++, Java and assem- 
bly language interface for devel- 
oping desktop and embedded 
applications for Linux, Macin- 
tosh, Solaris and Windows, plus 
a number of embedded plat- 
forms for a variety of processors. 
CodeWarrior Personaljava 
Platform Edition 1.0 is available 
now directly from Metrowerks 
(www.metrowerks.com) for 
$549. The package includes a 
Java compiler, rapid application 
development for the abstract 
windowing toolkit GUI library, 
a Java application validation 
utility called JavaCheck, a tar- 
get emulator and a Java project 
template. I 
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Sun is the best 
steward for Java, 
said Sun's Roth. 



< continued from page 1 

requirements are too restrictive 
and expensive. Some find having 
to co-brand their Java products 
with Sun difficult to swallow. 

"What we have seen is that 
Sun in its JCP has put together a 
system that we have character- 
ized as hub and spoke," said 
Dana Marks, Hewlett- 
Packard Co.'s program 
director for Java tech- 
nology and marketing. 
"They're at the hub, 
and the licensees are 
at the end of the 
spokes. Our informa- 
tion flows directly into 
Sun, and it flows back 
out to us. But it's what 
they want us to know 
and they're control- 
ling the specs, and it's less 
egalitarian than we'd like to 
see," he said. 

"The licensing is where part 
of the problem starts to arise," 
Marks added. "Suppose I as a 
vendor come up with a good 
idea. I show it to Sun, they 
accept it, and then charge us to 
license it back." 

Sun vigorously defends its 
position on Java. "I believe Java 
is a vendor-neutral process," 
said Bill Roth, Sun's group 
product manager for Java 2 
Enterprise Edition (J2EE), 
"and continued scrutiny will 
make sure Java remains a 
viable, vendor-neutral platform. 
I think it's disingenuous for 
vendors to carp in the press 
when they could be working 
with us to move Java forward." 

Smaller partners 
have no problem co- 
branding with Sun, 
reaping the benefit of 
dropping the name to 
their customers. "I 
call it wrapping your- 
self in the cloak of 
respectability," HP's 
Marks said. "They run The brand is the 
a full-page ad, and if seal of approval 
you recognize one 
name on the page, it 
will be Sun, not some 
e-dot something or other. 
They're looking for that part- 
nership and association." 

MONEY....OR BRANDING? 

IBM Corp.'s director of e-busi- 
ness marketing, Scott Hebner, 
questioned Sun's bottom line. 
"If they're not making money 
with it, why not contribute it to 
an open standards body? If you 
look on the Internet today, 
the No. 1 standard for HTTP 
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for Java use, said 
Sun's Paolini. 



[servers] is Apache, which is 
open source. The No. 1 operat- 
ing system for app servers is 
Linux, which also is open 
source. There is no reason Java 
would not fit this mold. And, 
innovation in Apache and Lin- 
ux is outpacing Java. The quali- 
ty is higher than in most com- 
mercial products." 

Sun, however, says that it's 
not about money but 
control. "It's been sug- 
gested that Sun should 
set its prices on Java so 
that it breaks even," 
said Roth. "I guarantee 
you that if we did that, 
our prices would go 
way up." 

Sun's harshest Java 
critic has been IBM. 
According to Hebner, 
IBM believes the 
Internet by definition must be a 
set of shared standards that are 
vendor-neutral. "What we do 
not want to see happen is the 
Internet become a battle- 
ground for vendor- spe- 
cific control points," 
Hebner said. "It obvi- 
ously doesn't benefit 
any vendor if the world 
is based like back in 
the early '90s where 
you had to make a 
decision on an operat- 
ing system, or pro- 
gramming language, 
that locked you into the 
control of one vendor." 

But more than money, the 

branding issue may be the 

biggest sticking point between 

the two industry giants. Sun's 

Roth laughed, "[IBM chairman] 

Lou Gerstner woke up 

one day and his people 

told him, 'We don't 

own Java.' They've got 

100 products that rely 

on Java, and in fact, 

their mortal enemy in 

hardware owns it. It 

probably made his 

head explode." 

But, IBM's Hebner 
looked at things dif- 
ferently. "If some- 
thing is controlled by 
one vendor at the expense of 
others, they have established a 
control point. It's not good for 
other vendors, or the overall 
economy, if branding becomes 
an important issue. If your 
product is based on J2EE, it 
must be branded Sun. Any- 
thing that uses Jini technology 
must be branded Sun. Any 
storage device that uses Jiro 
technology has to be branded 
Sun. Before you know it, 
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The problem starts 
with licensing, said 
HP's Marks. 



they're controlling the brand 
of the Internet." 

It appeared that Sun tried 
to appease its critics when it 
began working with the ECMA 
standards organization. But 
Sun claims there was a discrep- 
ancy over who would use the 
copyright. "We use [the brand] 
as our seal of approval for 
those who have passed the 
compatibility test," Paolini 
said. "We felt abdicating that 
would cost us a mechanism to 
control compatibility." 

For its part, ECMA claims it 
does not know the reason Sun 
has not made the specification 
available for standardization. 
ECMA secretary general Jan 
van den Beld explained in a 
written statement: "The Sun 
delegation promised to make 
the spec available at the 
[ECMA Technical Committee] 
meeting, but less than one hour 
before the end of the meeting 
their standards director Mr. 
Cargill came into the 
room saying that Sun 
lawyers would like to 
spend some more time 
on IPR [intellectual 
property rights] before 
making the spec avail- 
able. Despite several 
requests about the 
nature and contents of 
a possible IPR prob- 
lem, ECMA has never 
got an answer. So, we 
do not know what the 
problem(s) is (are). 

"It cannot be the copyright 
of Sun's own specification is at 
stake because such copyright is 
not touched by ECMA," con- 
tinued van den Beld. "It could 
be that Sun does not want to 
make the Java specification 
publicly available — a standard 
is per definition something 
under public control — because 
by that they might lose control. 
This would be rather simple, 
naive and late timing to become 
aware of this 'risk' because this 
had been already considered, 
and known, for more than three 
years in Sun." 

He added, "One could say 
that Sun has not really behaved 
like a gentleman with respect to 
ECMA, where ECMA has gone 
through a costly process which 
has been abruptly killed by Sun 
without any reasonable justifi- 
cation or explication." 

EVOLVING THE PLATFORM 

All parties to the JCP inter- 
viewed admit there are problems 
with Java's going to a standards 
► continued on page 21 



EDITORIALS 

Beware the Back Door 

The story broke, as computer security stories often do, 
as a stop-the-presses headline: Microsoft Corp.'s pro- 
grammers had placed a "back door" into the company's 
FrontPage Web-server extensions, which could be sur- 
reptitiously activated by a key phrase calling Netscape 
engineers "weenies" (see story, page 1). 

The daily papers rushed to print with accusations, but a 
week later, amid a flurry of confused and somewhat con- 
tradictory denials from Microsoft spokespeople, the story 
settled down to rumor, innuendo, accusations and counter- 
accusations. Back to business as usual. 

Our point here isn't about the obfuscation and delays 
in this particular situation. After all, a few bad apples have 
been writing back doors into corporate applications for 
decades. There's even a tacit acceptance of "intentional 
undocumented" features in shrink-wrapped applications, 
such as Easter eggs. There's a less cute name for another 
type of undocumented feature: time bombs. 

The broader message is a warning for our entire pro- 
fession: You can't trust that there won't be back doors, 
time bombs or other dangerous code in your company's 
applications, not unless there's a strong policy of source 
review, as well as tools that can detect unauthorized 
changes to previously approved source files. 

It's only going to get harder. Distributed objects pro- 
vide systems where not all of the components of an appli- 
cation are on the same server — or even on the same 
LAN — and there's often no guarantee about the integrity 
of the objects or components your applications access. 

The story should serve as a wake-up call to develop- 
ment managers, especially when code is tested by the 
same programmers who write it. 

Linux Grows Up — And Up 

And they said that Linux wouldn't scale. How about tak- 
ing Linux apps that run just fine on, say, a 400MHz 
Pentium Il-based server with 128MB RAM, and migrat- 
ing them to IBM Corp.'s 12-way S/390 G6 XZ7? As dis- 
cussed on page 23, Linux for the biggest, baddest main- 
frame is under serious development by IBM. 

Between IBM's mainframes and Linux running on Sun 
Microsystems Inc.'s 64-way Enterprise 10000 Starfire serv- 
er, there's no doubt that this grass-roots operating system is 
going to offer new challenges not only to its archenemy, 
Microsoft's Windows 2000, but also to traditional high-end 
systems such as IBM's OS/390 and AIX, and Sun's Solaris. 

Even for organizations that wouldn't consider using an 
S/390 as a Linux server, broader acceptance of Linux as a 
scalable solution can only increase the operating system's 
viability in the market. With a wider array of platforms to 
run on, more independent software vendors will port 
their enterprise solutions to Linux. With more enterprise 
solutions from well-known firms, CIOs will be willing to 
take a gamble. And with the CIO's backing, more home- 
grown Linux projects will be started. 

It's an organic cycle that most hardware and software 
vendors (with one notable exception) will encourage. Per- 
haps after the April market crash, profitless Linux start-ups 
won't have sky-high market valuations, but that doesn't 
mean that Linux won't be good for everyone's business. I 
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IF YOU BUILD IT, WILL THEY USE IT? 



Have you ever tried to use a 
piece of software that has 
all the right features but is sim- 
ply too annoying, frustrating or 
inconsistent to use? Been 
turned off by typos on an on- 
line vendors Web site? 
Been angered when 
you've read error mes- 
sages that say, "Your 
application has crashed, 
and all work has been 
lost," and been forced 
to press "OK"? I sure 
have, and so has Jeff 
Johnson, author of 
"GUI Bloopers." I often give 
such software or Web sites 
negative reviews — but John- 
son has done something more: 
He has developed a very in- 
formative book that should 
help you and your team avoid 
these and other common user- 
interface design and imple- 
mentation errors. 

Johnson's approach is a good 
one: He has abstracted his vast 
collection of user-interface 
gaffes into a series of design 
principles, many of which are 
presented with either real illus- 
trations from shipping software 
products or live Web sites, or 
from fabricated examples that 
make his points clearly. 

The primary audience for 
the "GUI Bloopers," says John- 
son, is the working developer 
creating applications without 
the assistance of a professional 
UI designer; the secondary 
audience is the software de- 
velopment manager. I would 
recommend managers as the 
primary audience; very few de- 
velopers are competent enough 
to create compelling user inter- 
faces without management 
oversight. After all, interface 
design is not sl technology issue: 
Even when software tools 
include GUI builders and wiz- 
ards, that's no guarantee that 
the results will be optimal. 




The book divides the bloop- 
ers into eight broad categories. 
Some are extremely basic: In 
the section called "First Princi- 
ples," Johnson urges develop- 
ers to focus on the function of 
the application first 
and determine its 
interface presentation 
later, and to remember 
that old-time adage 
that the screen belongs 
to the users (i.e., the 
application should not 
move the cursor or its 
windows) and the like. 
There's no excuse for forgetting 
the basics. 

More concrete guidance is 
given to coders in the next few 
sections, which cover the design 
of components such as menus, 
check boxes and radio buttons, 
as well as the layout of windows 
and dialog boxes. Blooper 1, 
found on page 62, urges devel- 
opers to avoid dynamic menus. 
The functions under "File," 
"Edit" and "View" should never 
change within an application; an 
inappropriate command should 
be grayed out, not removed 
from the display. Forgetting to 
put in keyboard shortcuts, or 
using nonstandard shortcuts 
(Ctrl-S is a de facto standard for 
saving a file, Ctrl-P for print- 
ing), is another no-no. 

The author spends a lot of 
verbiage reminding readers of 
the correct way to use check 
boxes (for single on/off choices) 
and radio buttons (when exact- 
ly one choice out of a field of 
multiple options is permitted). 
Granted, many applications 
misuse the basic GUI widget 
set, but Johnson appears to be 
bogged down with that particu- 
lar detail. He similarly is dis- 
mayed by the abuse of non- 
editable text fields, actions that 
happen on mouse- down rather 
than mouse-up, and arbitrary 
lengths of input fields. 



Johnson also dislikes the 
use of technical jargon (he 
calls it "speaking geek") in 
command and error messages. 
What should an end user 
make of an error message that 
says "type mismatch," or a 
request for a user to "authen- 
ticate" his session, or refer- 
ences to "strings" and "excep- 
tions." Ambiguity is another 
problem: The developers of an 
application know the differ- 
ence between its "find" and 
"search" features, but would 
the ordinary application user? 
Probably not. 

Those UI bloopers, though 
annoying, won't impair a work- 
er's efficiency. That's not nec- 
essarily the case with Johnson's 
sections on interactivity and 
responsiveness bloopers. For 
example, Blooper 46 covers 
the common practice of over- 
whelming users with decisions 
and details — if there are too 
many options on a menu or 
dialog box, the user 
won't know which to 
use and what their 
effects might be. 

That is particu- 
larly evident when 
important and mi- 
nor options are pre- 
sented without any 
emphasis that helps 
the user decide what to study 
and what to ignore. The advice 
Johnson offers: Label options 
clearly, group related features 
together, use "Advanced" set- 
tings boxes for less-frequently- 
used choices, and make impor- 
tant controls larger. 

One short chapter in "GUI 
Bloopers" is devoted to Web 
bloopers and, frankly, it only 
hits the tip of the iceberg. Yes, 
he's right, the "Back" button 
should always take browsers 
back to where they were 
before — too many sites trap 
users inside their menus. Yes, 
search engines generally are 
pretty bad. Yes, many pages 
are too large and poorly orga- 



nized. Yes, designers often 
use the wrong Web graphical 
widget. But if you are pri- 
marily looking for Web-site 
design advice, check out John- 
son's recommended Vincent 
Flanders' www.webpagesthat 
suck.com or Jakob Nielsen's 
www.useit.com. 

Chapter 8 focuses on what 
Johnson calls "management 
bloopers." In it, he berates 
organizations for placing user- 
interface design too low on the 
development priority list, not 
understanding what user- 
interface professionals do, and 
failing to either do enough 
user testing or to follow up on 
the results of such tests. He's 
right: When it comes to the 
creation of in-house applica- 
tions, few development man- 
agers that I've spoken with 
give much consideration to 
fine-tuning the interface de- 
sign. UI decisions are too 
often made by the developers 
on-the-fly, perhaps 
with suggestions 
coming from a sin- 
gle line-of-business 
manager. It's no 
wonder that end 
users are frequent- 
ly unhappy with 
their applications, 
or worse, find them 
so difficult to use that their 
efficiency is impaired. 

"GUI Bloopers" is a fine 
book, good both for develop- 
ers to use when they are build- 
ing their applications and for 
the managers and testers to 
study when they are evaluating 
their applications. Johnson's 
collection of bloopers will 
raise awareness of what can go 
wrong with an application — 
and his related set of design 
principles should help devel- 
opers avoid those mistakes. 
Strongly recommended. I 

"GUI Bloopers" Jeff Johnson. 
Morgan Kaufmann, 2000. 
Trade paper, 559 pages. $44.95. 
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LAST CHANCE 

This is your final complimen- 
tary issue of SD Times. If you 

have not subscribed, you will 
no longer receive SD Times. 
You may use the return card 
bound into this issue or go 
online at www.sdtimes.com 
and subscribe electronically. 
Make sure you don't miss an 
issue by subscribing today! 

Thanks, 

Ted Bahr, Publisher 



LETTERS TO THE EDITOR 



MONGOOSE 'PROOF' OF 
DNA BENEFITS 

We appreciate the coverage you 
gave to Mongoose in the April 
15 issue of SD Times ["New 
Products, Upgrades at SD 
2000," page 1]. We do not con- 
sider Mongoose, our packaged 
DNA development framework, 
to be "functionality that 
Microsoft forgot," as stated in 
your last issue. We consider 
Mongoose to be a proof state- 



ment to Microsoft's Windows 
DNA platform and all of the 
benefits it promotes in terms 
of functionality, productivity, 
performance, scalability and 
low cost of ownership, and 
we're very appreciative of the 
staunch support Microsoft has 
put forth thus far to promote 
Mongoose. 

John Mansour 

Vice President of Marketing 

e-Mongoose Inc. 



WHAT DO YOU THINK? 

SD Times welcomes feedback. 
Letters must include the 
writer's name, company affili- 
ation and contact information. 
Letters may be edited for 
space and style and become 
the property of BZ Media. 

Send your thoughts to 
letters@bzmedia.com, or fax 
to 516-922-1822. Please mark 
all correspondence as Letters 
to the Editor. 
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Who Are the Real E-Developers? 

E-business is driving changes in developers, development processes 



BY JENNIFER DEJONG 

It seemed like only yesterday, 
when Web applications did lit- 
tle more than deliver static 
pages. The company Web site 
published the annual report 
and posted a press release when 
news broke, providing the basic 
information that customers and 
investors needed to know. 

And even as sites evolved, 
allowing customers to do things 
such as check the status of mer- 
chandise ordered offline, Web- 
enabled applications — where 
the server talks to a Web inter- 
face and to a back-end data- 
base — were tough enough to 
handle the task. "In the begin- 
ning, simple solutions seemed 
like the answer," said John 
Capobianco, senior vice presi- 
dent and chief marketing offi- 
cer of Bluestone Software Inc. 
(www.bluestone.com). 

But that was before e-busi- 
ness boomed — before it was 
commonplace for companies 
to sell goods and services 
online, packaging their wares 
among how-to advice and prod- 
uct reviews geared to 
helping consumers 
decide what to buy. 
"Very few companies 
started out conducting 
big business on the 
Web," said Capobian- 
co. But when they 
did, they found them- 
selves pushing the 
limits of Internet- 
enabled applications. 
"When your site gets 
tens of thousands of 
hits per second, you 



The e-developer is 
really the e-team, 
said IBM's Olague. 




In the beginning, 
simple solutions 
sufficed, said Blue- 
stone's Capobianco. 



find out 



your limitations fast," he said. 

THE NEW E-DEVELOPERS 

To remedy that situation, ven- 
dors are delivering a new breed 
of sophisticated Internet devel- 
opment platforms. Designed to 
support the way e-businesses 
buy and sell goods and services 
and to facilitate the way they 
communicate with customers 
and partners, e-business devel- 
opment platforms are essential- 
ly standards-based sets of tools 
and services tightly integrated 
around an application server. 

Although products vary 
from vendor to vendor, e-busi- 
ness development platforms 
share some common attributes, 
according to analyst Daryl Plum- 



mer, group vice president for 
Internet and e-business tech- 
nologies at market- research firm 
GartnerGroup Inc. Built around 
the application server infra- 
structure, they are based on 
Web standards (HTTP, 
XML, Java, JavaBeans) 
and provide tight inte- 
gration with applica- 
tions inside and outside 
company walls, taking 
data from one source 
and delivering it to 
another. In addition, 
they offer commerce 
components, such as 
shopping carts and tax- 
ation modules, and per- 
sonalization services, allowing an 
e-business to tailor content and 
product offerings to individual 
consumers and partners, based 
on stated and implied prefer- 
ences. And, depending on the 
vendor's orientation, the new e- 
business development platforms 
offer special services, such as 
content management, according 
to Plummer. 

As the market for applica- 
tion servers morphs 
into a market for e- 
business platforms, 
Plummer said, this 
technological shift 
mirrors the changing 
business landscape. 
"Enterprise class com- 
puting has evolved to 
global class comput- 
ing," said Plummer. 
"The enterprise is on- 
ly one piece of the pie. 
You have to be able to 
integrate with multiple partners 
outside the company." 

What's more, said Blue- 
stone's Capobianco, you have to 
be able to reach your cus- 
tomers — to be able to serve 
[information] back to them, 
regardless of what [kind of 
client] they come in on. "It's not 
just the browser you are talking 
to. It might be a partner's 
inventory system, a PalmPilot 
or a Web-enabled cell phone, 
he said. 

Bluestone's Total-e-Business 
platform, which powers sites 
such as Food.com and CDbeat 
.com, includes five editions: 
B2B, Application Server, B2C, 
Wireless and Global Editions, as 
well as a new Syndication Server. 
Given the ever- expanding 




enterprise, it's no surprise that 
tight integration and standards 
are the key concepts behind e- 
business development plat- 
forms. Unless such tools and 
services are well integrated 
with the application 
server, the products 
are too tedious for 
customers to use, said 
Valerie Olague, pro- 
gram director of busi- 
ness transformation 
product marketing at 
IBM Corp. The com- 
pany's WebSphere e- 
business development 
platform serves as a 
foundation for inte- 
grated services, Web site ser- 
vices and IT services; and 
also includes commerce capa- 
bilities for both business- 
to-consumer and business-to- 
business markets. 

Strong integration of such 
tools and services is critical — 
especially when you consider 
that virtually all companies 
(other than brand-new dot- 
coms) are already contending 
with systems made up of many 
disparate parts, glued together 
with intricate programming. 
"Customers expect an e-busi- 
ness platform to be reliable and 
standards-based," said Olague. 
"They are looking for the next 
level of services that make it 
easier to build apps and to dif- 
ferentiate themselves from 
their competitors." 

Because e-business needs 
are constantly evolving — Web 
sites are continually adding 
new services or product offer- 
ings — the development plat- 
forms on which they are based 
must be flexible. "You need to 
be able to take the pieces of 
the systems apart and easily 
put them back together," said 
GartnerGroup's Plummer. 
While Web-enabled systems 
require sophisticated program- 
ming in order for the pieces to 
talk to each other, the compo- 
nents of an e-business platform 
can be attached and detached 
like Velcro, he said. 

MARKET PRESSURES 

That ability to take things apart 
and put them back together 
not only addresses the techni- 
cal limitations of earlier gener- 
ation systems, it also helps dot- 



com companies cope with the 
two biggest business pressures 
facing all Internet start-ups: 
the lack of time and the short- 
age of programmers. In a very 
real sense, e-business develop- 
ment platforms are designed 
to do that. 

"The new software develop- 
ment life cycle is impacting 
everyone," said Dave Rosen- 
lund, senior director of product 
marketing at Rational Software 
Corp. (www.rational.com). "Soft- 
ware engineering teams used to 
argue over time frame vs. quality. 
But those days are long gone. 
Now you have to build it right 
and build it fast," he said. 
"Whereas 'fast' once meant 6 
months, in the e-business world 
that could mean overnight." 

A leader in the software 
development life-cycle man- 
agement market, Rational 
makes tools and offers services 
that help e-business devel- 
opers improve quality 
and increase their 
time-to-market. 

In order to meet 
such deadlines, e-bus- 
iness players need 
to take a collaborative, 
team approach to get- 
ting Web applications 
to market. E-business The programmer 
development platforms shortage won't end 
are geared to working soon, said Silver- 
this way. "The e-devel- Stream's Daniel. 
oper is really the e- 
team," said IBM's Olague. A 
development effort encom- 
passes an array of roles — not 
all of them programming. They 
are broken down according to 
the skill level and to the role 
that each team member as- 
sumes, she said. 

For example, a business 
analyst, not a programmer, 
would be responsible for 
developing the business rules 
that are required to make a 
simple loan-approval applica- 
tion work. That would mean 
mapping out the activities and 
steps involved in determining 
whether an applicant qualifies 
for the loan, then handing off 
that information to the pro- 
grammer, who in turn incorpo- 
rates those rules into the 
application. "You don't need to 
be a hard-core developer to 
[create the business logic]," 
said Olague. 




The role-based approach to 
Web application development 
also allows a company's market- 
ing executives to have their say 
early on, as to how the Web site 
will cater to specific customers. 
On a content and commerce 
site, that would mean, for 
example, defining the rules and 
conditions that govern the 
delivery of personalized con- 
tent. A marketing professional 
might specify that users who 
bought dog food five times be 
served up feature articles of 
special interest to pet owners. 
Or that customers who in the 
past bought baby gear be 
offered a special on disposable 
diapers in the future. 

Not only does that allow 
marketers to increase sales by 
gearing offers to users' stated 
and implied preferences (and 
to change those rules easily 
and often), but it also makes 
more efficient use of the devel- 
oper's time. That helps compa- 
nies cope with the program- 
mer shortage. 

"I don't want a Java develop- 
er manipulating rules all day," 
said Keith Daniel, vice presi- 
dent and general manager of e- 
Business solutions at 
SilverS tream Software 
Inc. (www.silverstream 
.com). "I'd go broke 
[if I let them do that]. 
Java programmers 
cost 100K," he said, 
adding that he doesn't 
see the shortage end- 
ing any time soon. 

The SilverStream 
e-Business Platform, 
which powers portal 
sites such as www 
.charlottestreet.com, is com- 
posed of the SilverStream Por- 
tal Framework solution, the 
SilverStream xCommerce pro- 
duct line and the industry- 
standard SilverStream Appli- 
cation Server. 



FOUNDATION FOR BUSINESS 

In a sense, the rise of the 
Internet — and the advent of e- 
business development plat- 
forms — has changed the very 
nature of developing software, 
moving it into the mainstream 
in a way that few could have 
imagined even a couple of 
years ago. "Every company is a 
software company," said Ratio- 
nal's Rosenlund. "More com- 
panies depend on software 
more than ever before." 

Dramatic changes have 

come about in an astoundingly 

short time, said IBM's Olague. 

► continued on page 19 
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sts B-to-B Commerce 



Data, metadata schemas provide a common information exchange 



Players must agree 
on a common lan- 



BY JENNIFER DEJONG 

B-to-B may be the buzz among 
dot-com investors, but before 
the Internet emerges as the 
universal business exchange, 
where any partner can poten- 
tially trade goods and services 
with any other, a not-so-trivial 
detail still stands in 
the way. 

The players must 
agree on a common 
language, a way of 
allowing their systems 
to talk to one another. 
In the broadest sense, 
that common lan- 
guage is XML, the 
emerging Internet 
standard for sharing guage, said Silver- 
data between applica- Stream's Holahan. 
tions. By making it 
easy to exchange all types of 
information, XML (Extensible 
Markup Language) has the 
potential to dramatically in- 
crease efficiencies among trad- 
ing partners, allowing a buyer 
and supplier — say a PC manu- 
facturer and a maker of circuit 
boards — to seamlessly execute 
purchase orders and invoices 
over the Internet. 

"XML presents a new way of 
describing data exchange. But 
[when it comes to B-to-B com- 
merce], the problems are still 
there," said Fred Holahan, vice 
president and general manager 
of the B-to-B commerce divi- 
sion at SilverStream Software 
Inc. (www.silverstream.com). 
"Trading partners have to ham- 
mer out a common vocabulary." 

To do that in XML, it is nec- 
essary to create XML inter- 
faces to both systems and set 
up an application server on one 
side or the other to keep them 
in sync. Of course, for this to 



work, both companies will have 
to agree on a standard Docu- 
ment Type Definition (DTD), 
which defines things such as (in 
the case of the PC maker and 
board manufacturer) order 
numbers, item numbers, bills 
of materials, and other data 
commonly appearing 
on a paper-based pur- 
chase order. 

That's easy enough. 
But what happens 
when, inevitably, the 
PC maker wants to 
work with additional 
partners? Doing so 
would presumably re- 
quire the adoption of a 
common schema — a 
uniform way of for- 
matting information 
for exchanges within that indus- 
try, potentially allowing any play- 
er to join the trading circle. But 
with hundreds of industries, 
both vertical and horizontal, 
relying on XML to implement 
B-to-B commerce, agreeing on 
such details is a daunting task. 



NO NEED FOR CONSENSUS? 

"You are never going to get the 
WalMarts of the world to agree 
on exactly what [information] 
belongs on an invoice," said 
David Turner, XML product 
manager at Microsoft Corp. 
"There is certainly going to be a 
proliferation of schemas — it's 
hard to know [which partners in 
which industries] have begun 
doing what," he said. 

The notion that so many 
companies are implementing 
their own schemas sounds like a 
nightmare. But, according to 
Turner, it's not. "It means they 
are stepping into the game — 
they are already into the next 



E-DEVELOPERS 

< continued from page 18 

"A few years ago, an e-business 
platform was nothing more than 
an application server with a 
Web interface," she said. That's 
what it meant to be an e-devel- 
oper. "Now we moved from 
basic Web-enabling to full-scale 
Web application servers," she 
said. In effect, today's e-devel- 
opment platforms have created 
a foundation on which to build 
a business. 

Olague's dealings with pro- 
spective WebSphere customers 
bear that out. "They never ask 



what level of what JDK is being 
implemented," she said. Instead, 
they want to know what the 
development platform will en- 
able them to accomplish from a 
business perspective. 

What can we expect in the 
future? The e-business plat- 
form will continue to add new 
capabilities, providing every 
conceivable business function 
across sales and marketing, 
distribution, manufacturing 
and development. "Just ^ ve 
years ago, without the Web 
and without standards, none of 
this would have been possi- 
ble," said Olague. I 



generation of e-commerce." 

The real reason he's not wor- 
ried about multiple schemas is 
that he and others don't believe 
that gaining consensus — at least 
on the schema level — is the way 
to go. As the industry strives to 
figure it all out, what's emerging 
is not so much a big-time battle, 
but some baseline standards 
(often industry- specific) that 
would define common docu- 
ments, along with sets of tools 
that make it easy and quick for 
trading partners to transact 
business even when they use 
different schemas. 

"For XML to work, we need 
a baseline set of standards. For 
it to fly, we need [the tools] to 
extend those standards on a 
partner-to-partner basis," said 
SilverStream's Holahan. 

Holahan and others expect to 
see a small number of widely 
accepted baseline standards take 
hold. Some, such as RosettaNet, 
dedicated to development and 
deployment of standard elec- 
tronic business interfaces, are 
horizontal. Others are geared to 
vertical industries, such as the 
FpML (Financial Products 
Markup Language), recently 
proposed by financial industry 
leaders J. P. Morgan and Price- 
WaterhouseCoopers. 

IBM Corp. recently pro- 
posed the tpaML (Trading Part- 
ner Agreement Markup Lan- 
guage), a high-level 
framework that de- 
fines how XML-based 
TPA documents cap- 
ture the essential in- 
formation upon which 
trading partners must 
agree in order for 
their applications and 
business processes to 
communicate. IBM 
hopes the standard 
will emerge and grow 
as other vendors lend 
their support and add 
their input, said Bob Sutor, 
IBM's program director for 
XML technology. 

Broad standards will allow B- 
to-B players to tap into the true 
power of XML. "One of the 
powerful benefits of XML is that 
once you have all your data fol- 
lowing the syntax rules of XML, 
you have put it in a form that is 
easy to transform," said Turner. 
"I can take two invoices from 
two trading partners — as long as 
each invoice includes the in- 





formation we need to do busi- 
ness. It's easy to transform it." 

Once partners agree to a 
baseline standard, schema edi- 
tors and mapping tools will 
make that happen. Such tools 
are in the very earliest stages. 
Microsoft's version is built into 
its forthcoming BizTalk Server 
2000, part of the company's 
Windows DNA 2000 platform 
for building and deploying 
Web applications. BizTalk is 
expected to ship by 
the end the year. 

SilverStream's an- 
swer is xCommerce, 
a family of XML inte- 
gration server prod- 
ucts that lets business 
analysts and develop- 
ers build and deploy 
B-to-B e-commerce XML will enable more 
applications. Due to players to enter the 
market in June, xCom- supply chain, said 
merce is a part of the IBM's Sutor. 
SilverStream eBusi- 
ness Platform. 

A host of other similar tools 
is expected to emerge this year. 
Their importance for B-to-B 
commerce can't be underesti- 
mated. Partners won't have to 
agree on an exchange format to 
communicate, said Holahan. 

IT ALL GOES BACK TO EDI 

To appreciate XML's flexibili- 
ty — and understand its implica- 
tions for trading partners doing 
business on the Inter- 
net — it's helpful to 
compare it with Elec- 
tronic Data Inter- 
change (EDI), the 
proprietary protocol 
buyers and suppliers 
have relied on to 
exchange electronic 
information for years. 
"From a B-to-B com- 
merce perspective, 
XML is not the test- 
ing ground. The ini- 
tial testing ground 
said Holahan. 
Ninety-eight percent of the 
Fortune 1,000 have adopted 
EDI in some fashion, said 
IBM's Sutor. "Over the years, it 
has saved them significant sums 
of money, compared to the 
paper-based way of implement- 
ing purchase orders," he said. 

Despite its widespread adop- 
tion, EDI was an extremely 
rigid format. "You had to fill in 
information in a particular place 
[making it very difficult to alter 



Microsoft's Turner 
said he is not worried 
about multiple 
schemas. 



was EDI: 



documents]," said Sutor. Ex- 
pensive and time-consuming 
to implement, the only way to 
integrate EDI exchange formats 
was through massive program- 
ming efforts, said Holahan. 

"EDI arrangements were 
based on programming inter- 
faces," said Microsoft's Turner. 
"You had to have a smart IT guy 
talking to another smart IT 
guy." That was expensive. 
"Without having to hire an 
army of programmers, it's 
cheaper and more efficient to 
do business," said Holahan. 

What's more, EDI often put 
the little guys at the mercy of the 
big guys. Once you get 
outside the Fortune 
1,000, only 5 percent 
of companies adopt 
EDI, according to 
Sutor. "It's too expen- 
sive to maintain and 
support the supply 
chain at small levels." 
Here's how that 
worked. A small sup- 
plier of, say, china 
and silverware, which 
sold its wares in a 
major chain of department 
stores, was routinely forced by 
that store to purchase that 
store's custom EDI system just 
to continue doing business. 
These systems are propri- 
etary — you couldn't use one 
buyer's system to connect to 
another's — and quickly run into 
tens of thousands of dollars. So, 
a small supplier could probably 
afford to launch a single EDI 
effort. That effectively prevent- 
ed it from doing business with 
more than one partner. "The 
big players dictated every- 
thing," said Holahan. 

By contrast, XML-enabled 
B-to-B commerce levels the 
playing field. Of course, the 
big buyers will still stipulate 
which schemas they want to 
use to exchange data. But now, 
said Holahan, the little guy can 
say: "We know you rule the 
world. But [it's no problem] to 
send back the info in the for- 
mat you require." 

In the long run, because it is 
relatively inexpensive to imple- 
ment, XML-enabled B-to-B 
commerce will bring more play- 
ers into the supply chain, result- 
ing in lower prices and a larger 
choice of vendors, said Sutor. 

Ultimately, that will allow 
arbitrary companies to set up 
relationships in an ad hoc fash- 
ion. "You didn't have to know 
me yesterday in order for you to 
do business with me today," 
said Turner. I 
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PKI Environment Lightens Up Under Java 

RSA Security's Cert-J reduces weighty requirements 

themselves may use other PKI vendors 



BY DOUGLAS FINLAY 

Independent software developers will 
be feeling just a wee bit more secure 
with the release of RSA Security Inc. s 
RSA BSAFE Cert-J Java security pro- 
gram. According to RSA, the Cert-J pro- 
gram will allow developers to more easi- 
ly write security applications for the PKI 
Keon and VeriSign Inc.'s OnSite envi- 
ronments, and then deploy them across 
all platforms used by multiple vendors. 

With this new interoperability slant, 
RSA (www.rsa.com), in debuting Cert-J 
at its European conference in Munich, 
further looks to solve the dilemma 
developers face in writing security appli- 
cations by protecting them from cus- 
tomers who incorporate a variety of pub- 
lic-key infrastructure vendors to create 
secure environments. 

Kathy Kriese, product manager at 
RSA, explained that writing for the public 
key infrastructure (PKI) environment is 
currently fraught with difficulty because 
"companies are known to acquire other 
companies." She said, "If an organization 
has a PKI system it has implemented 
with one vendor and it acquires another 
company using PKI from another vendor, 
the developer will put in a lot of extra 
effort to get the new application to work 
across the enterprise." 

Adding to the complexity for devel- 
opers, she said, are companies using PKI 
to work with customers, suppliers and 
vendors in extranet environments who 



to implement security measures. If ven- 
dors' partners have not used the same 
PKI vendor for certificates, she said, 
developers will have problems under- 
standing the certificates. "There are 
some things PKI vendors have done that 
are proprietary, rather than follow stan- 
dards, making interoperability much 
more difficult," Kriese said. 

But RSA claims that Cert-J reduces 
both the effort and expertise required to 
write to the PKI and VeriSign security 
environments, while getting the applica- 
tions out across the enterprise in timely 
fashion. Kriese said that, normally, for 
developers to enable applications in PKI, 
they are required to know certificate 
management protocols, network proto- 
cols and cryptography, for example. But 
Cert-J greatly reduces the need for such 
a knowledge base, freeing developers to 
concentrate on the application itself. 
"They can add our code into their appli- 
cation, recompile their program and work 
it to be a secured application," she said. 

In addition to providing for multiven- 
dor interoperability, Cert-J offers native 
support for the Certificate Request Syn- 
tax protocol, or CRS, making it easier to 
request, retrieve and revoke certificates 
when in the VeriSign OnSite environ- 
ment. Kriese said the CRS consists of a 
request identifier, a template of certifi- 
cate content and an optional sequence 
of control information. I 
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body, with perhaps the biggest drawback 
being the slow process for change. 

"We've gone from a simple language 
and run-time platform to more than 80 
new APIs and a full-blown platform," said 
Sun's Paolini. "We did this working with 
the community." And Roth added, "We 
believe we are best positioned to be Java's 
steward. The pace of innovation of Java 
would come to a screeching halt. We have 
an innovative process for developing 
technology at market- relevant speeds." 

Sun claims its upcoming modifica- 
tions to the JCP, version 2.0, will address 
many of the issues its licensees have. 
Paolini said changes in the decision- 
making process will be the highlight of 
the revised JCP, which was due out late 
last month. Moving forward, he said, 
J2EE will be reviewed by the JCP's 
executive committee, and partners will 
be able to develop new functionality to 
the platform and reap some compensa- 
tion for having done that work. "These 
companies will [develop the platform] to 
lead the market and gain expertise, and 
will probably develop a competitive 
product on top of that," Paolini said. 

"We will not do it in an autocratic 
fashion." Roth said, "Java is a communi- 



ty, a lifestyle, a belief system. There's 
more to Java than trying to make a buck." 

While David Johnson, business man- 
ager and vice president of marketing for 
Computer Associates International Inc. 
(www.cai.com), said he would not be 
surprised to learn that Sun is losing 
money on Java development, he also 
said Sun is "not in it for purely altruistic 
reasons. The platform [Java] is helping 
to push their hardware line. What they 
gain in speed of development is that you 
need more hardware to drive it. 

"There is a kind of parallel with 
Microsoft," Johnson continued. "There 
was a sense that when Microsoft was 
developing a new API for its operating 
system, they gave their own application 
developers a head start to develop to 
that API. With Sun in the lead, are they 
taking advantage [of Java growth] to put 
hardware components in place before 
anyone else can?" 

Lee Garrison is director of business 
development at KL Group, a new mem- 
ber of the JCP. As such, it comes to the 
table with an unjaded view of the process. 

"Sun must decide on whether [Java] 
will be proprietary or a standard," 
Garrison said. "They can't sit on the 
fence. We believe there should be 
cooperation on standards and competi- 
tion on implementation." I 
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IBM to Ride the Penguin's Coattails 

Big Blue looks to boost server sales with Linux for System/390 



BY EDWARD J. CORREIA 

The workhorse of the IBM 
Corp. enterprise computing 
line is pairing up with the pre- 
vailing newcomer of the operat- 
ing-system world. IBM has 
developed and released for 
testing a set of Linux drivers 
and extensions for its Sys- 
tem/390 series of high-end 
enterprise computers in a move 
the company says will help it 
strengthen its position in the 
high-end server market. 

"Clearly it is going to provide 
us opportunities to sell more 
hardware: that's one of the rea- 



sons we're interested in it," said 
Steve Carre, IBM's manager of 
OS/390 and Linux marketing. 
The move also was designed to 
provide IBM customers with 
more choices. 

"Today we have OS/390, 
and we're trying to get as many 
applications on [it] as we can, 
but it's a difficult port. We 
believe we can get more appli- 
cation vendors and application 
providers to go to Linux 
because it's a much easier port 
and migration than it was to 
OS/390," he said, indicating 
that in most cases, all that is 



necessary is for code to be 
recompiled. 

Carre was quick to point out, 
however, that the development 
of Linux for the S/390 was not 
designed as a migration path for 
current OS/390 customers. 
"Today the System/390 is 
running a lot of transactions 
and 'bet-your-business' appli- 
cations," he said, which IBM 
believes are not the applica- 
tions of the Web and of e-busi- 
ness. The application develop- 
ment products for OS/390 are 
not Linux-compatible. 

Rather, the move was de- 



signed to attract new customers 
to an industry stalwart that is 
now taking its first steps toward 
an open-source operating sys- 
tem. But some of the character- 
istics that attracted customers 
to the S/390 as a high-end serv- 
er platform — its scalability and 
high availability — disappear 
when IBM's OS/390 is replaced 
by Linux, and customers look- 
ing for those features will have 
to wait. 

"We've spent a lot of money 
on our OS/390 and MVS [Mul- 
tiple Virtual Storage] platform, 
making it very available," 
explained Carre, "and we have 
worked with the hardware, the 
operating system and the mid- 
dleware. What you would get 
with the Linux environment is 



many of the qualities of service 
of the hardware," including 
hardware redundancy, but very 
few of the software features, 
which Carre said will come 
over time. "The extensions that 
we have done fundamentally 
were device drivers and com- 
pilers. We are looking to 
enhance the product, and Lin- 
ux will be there over time, 
depending on how the open- 
source community views this." 
A link to the source patches 
required to build Linux for the 
S/390, all of which are or will 
soon be open, can be found 
at http://oss.software.ibm.com/ 
developerworks/opensource. 
Since first being posted late last 
year, the patches have been 
downloaded 1,450 times. I 



BACK DOOR 

< continued from page 1 

Microsoft issued a revised 
bulletin, still encouraging the 
removal of DVWSSR.DLL, 
which does contain an un- 
checked buffer, though early 
reports of the potential severity 
of compromise from overflow- 
ing that buffer depended too 
heavily on permissions being 
misconfigured. By the advent 
of the revised bulletin, Micro- 
soft rejected the notion of a 
back door it had seemed to own 
up to in earlier reports. Lipner 
told SD Times, "There was no 
back door... Microsoft has a very 
firm corporate policy against 
the introduction of back doors 
in products, and there has 
never been an instance of a 



back door being found in one 
of our products." 

WATCH YOUR BACK 

Although it appears Microsoft 
dodged a bullet in this instance, 
the fact is that back doors are so 
easy to add, difficult to detect 
and tempting to install, the pos- 
sibility they're in your code is 
very real. And that's a huge risk. 
"As the software author, you 
cannot insert back doors," said 
Dan Kaminsky, security analyst 
for DoxPara Research (www 
.doxpara.com). "The mistake 
people make is saying, 'We 
have the right to see how 
they're using the software, 
or to make sure they're not 
pirating it.' Never expose your 
genuine customers to risk, even 
if it will help you catch thieves. 



Don't put in a way for you to 
control your customers' systems 
over the network and trust the 
Internet to identify you — the 
network can lie (with spoofed 
IP addresses, etc.). ...Never 
intentionally put a command in 
software that allows you to do 
something on the customer's 
hardware — it's their hardware. 
You're violating the law and 
opening up a hole for every- 
body else to violate the law," 
said Kaminsky. 

William J. Orvis, security 
specialist with the U.S. Depart- 
ment of Energy's Computer 
Incident Advisory Capacity 
Team (www.ciac.org), said, "If 
you're really concerned about 
something like that, then you've 
got to have team members read- 
ing each other's code. If it's your 



latest copy of a word processor, 
so what? It doesn't do anything. 
If it has anything to do with the 
Internet, you should be [peer 
reviewing] anyway — looking for 
buffer overflows and other vul- 
nerabilities. You have to make 
sure that the service is strong 
and can't be broken into. Make 
the search for back doors part of 
your quality- control process." 
Even managers who aren't pro- 
grammers can have team mem- 
bers read each other's code. 

"It also depends on how big a 
company you are," said Orvis. 
"If you're a [huge company], 
you've probably got a whole 
team of quality-control people. 
But even then, it's really easy to 
slip one of these things in there, 
especially if someone wanted to 
be really stealthy. If the pro- 



grammer stuck in a back door 
just as a convenience to himself, 
he might have marks around it 
with a reminder to take it out, 
but if it's stealthy, it looks like 
something else," said Orvis. 

"A back door can consist of 
as little as one line of code, and 
there's no particular flag," said 
Orvis. "If the programmer cre- 
ates a command line that has 
some odd-sounding name to it, 
you might not see it. You've got 
to completely understand what 
your code is doing to spot it. It 
comes around to the other 
problem — making sure the 
people you're working with are 
people you trust." 

If you don't want to gamble 
on the honor of those around 
you, open source will get you 
lots of free peer review. I 
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Formula One is an API-driven development tool that 
delivers a 100% Pure Java, Excel-compatible spread- 
sheet engine for reporting and analysis applications 
deployed on the Web. Formula One can be used on 
any tier (server, client, database) and is especially 
effective in the middle layer of 3-tier applications. 
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VBusiness has moved automated Software Change Management from 
the status of making good business sense to a necessity for survival!" 

Perry Harris - Yankee Group Analyst 

Buisness demands cutting-edge tools to manage software development 

Applications running from the mainframe to the Web stress your systems for 
managing software Change - with more projects, more frequent changes, and greater 
complexity. All happening in <?Time. Fast; faster, and even faster. 

In this volatile environment, any change can stop your ^Business. 
At SERENA, we're experts at controlling ^Change. 

We've delivered proven Software Change Management for over 20 years - 
now to 80% of the Fortune 50. With our full solution of software infrastructure products, 
you too can increase uptime & availability. 

Lower costs. And speed time to market 

Learn how SERENA will give your business a competitive edge. 
Attend SERENA'S free Solutions Seminar - featuring Yankee Analyst Perry Harris. 
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FROM MESSAGE QUEUES TO REAL TIME 



Who would have thought the 
recent ruling against Microsoft 
would result in a legal definition of mid- 
dleware? Regardless of whether you 
exulted in or deplored Judge Thomas 
Penfield Jackson's assessment of 
Microsoft's conduct, you had to wonder 
who schooled him on the technical taxon- 
omy Consider, for example, the following 
excerpt from the decision (United States 
of America v. Microsoft Corporation): 
"...Microsoft sought to convince develop- 
ers to concentrate on Windows-specific 
APIs and ignore interfaces exposed by the 
two incarnations of middleware that 
posed the greatest threat, namely, 
Netscape's Navigator Web browser and 
Sun's implementation of the Java technol- 
ogy." Hmm... Netscape Navigator? Mid- 
dleware? You mean I've been writing 
about the wrong technologies all along? 
[No comment. -Editor] 

All kidding aside, the definition of 
middleware has been undergoing a rather 
dramatic expansion the past few years — 
certainly CORBA and EJB can be added 
to the mix, and much of EAI and other 
technologies that provide glue between 
applications are also new candidates for 
the appellation. Indeed, just about any- 
thing that is not on the desktop or the 
database server is arguably middleware. 



Predictably, of course, most of these 
vendors go way out of their way to avoid 
using the term (the "m" word, as it were) 
for fear of being lumped with old-fash- 
ioned bread-and-butter messaging infra- 
structure that often delivered data to 
and from IBM mainframes. The true- 
blue, Big Blue middleware package, 
MQSeries, is the dominant player in this 
market, and indeed in terms of tradi- 
tional middleware it perfectly 
fits the bill. 

IBM's MQSeries and many of 
the traditional message-oriented 
middleware (MOM) implemen- 
tations are message-queuing. 
(Hence the name MQSeries.) 
This means that they dump mes- 
sages into queues for clients to 
pick up later. By queues, you 
should understand "files." Messages are 
written to a designated file where the 
client can go look them up asynchronous- 
ly — that is, at any time. 

Message-queuing middleware is 
used wherever data needs to be moved 
back and forth between disparate sys- 
tems and where there is no over- 
whelming need for speed. The stock in 
trade of these packages is multiplat- 
form data movement. Speed is a sec- 
ondary consideration. That's not to say 
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these packages are slow; however, they 
are nowhere close to real time. 

Real-time middleware is used in 
environments where high-speed distri- 
bution of live data is of prime impor- 
tance. A classic case, of course, would 
be stock exchanges where stock quota- 
tions must be distributed widely and 
very quickly. The two significant play- 
ers in this market are Tibco and Talari- 
an. They both use publish-and-sub- 
scribe models. In these, clients specify 
what data they are interested in. The 
publishing end of the equation 
broadcasts the data, and the 
subscribers then receive the 
data they were interested in. 

The companies use different 
approaches. Tibco's implemen- 
tation puts client software on 
each desktop. Then it monitors 
the data broadcast and culls 
from it whatever the client has 
subscribed to. 

Talarian's implementation, by con- 
trast, does not do the filtering at the 
client desktop. Rather the servers for- 
ward only the messages in which the 
desktop client has expressed interest. 

Like traditional queuing middle- 
ware, both companies' products offer a 
wide variety of interfaces to their mes- 
saging systems, so that they can be 
deployed in all manner of heteroge- 
neous enterprises. 



My guess is that the future of mid- 
dleware is in the real-time packages. 
Today's enterprises are under pressure 
to deliver speed of execution, which 
means speed of data delivery. And as 
back-office systems are increasingly con- 
nected to Internet/Web interfaces, the 
ability to move data quickly to where it is 
needed is a competitive advantage. 

IBM has recognized this by a rollout 
a while back of a publish-and-subscribe 
overlay to MQSeries. This is the first 
step in moving toward high-speed data 
delivery. But since this package dove- 
tails with the slower message-queuing 
infrastructure, delivery times have not 
been in the real-time domain. 

Another aspirant to faster delivery is 
Microsoft, with its MSMQ package. As 
you can gather from its name, it too is a 
message-queuing implementation. It 
lacks the great penetration into the 
enterprise needed to really test and 
establish middleware. However, despite 
this lack of widespread deployment, the 
product is expected to acquire a pub- 
lish-and-subscribe aspect and improved 
delivery times. 

In the meantime, Tibco and Talarian 
are well placed to handle the workload 
for the foreseeable future. I 

Andrew Binstock is principal analyst at 
Pacific Data Works LLC. Reach him at 
abinstock@pacificdataworks. com. 
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Put the 

POWER 

of Excel 
on the Web. 



Let's face it, using Excel on the Web can be puzzling. Excel can only be 
used on Windows operating systems, and its desktop-bound 
architecture prevents it from leveraging advances in database, Web, and 
application servers that power eBusiness and B2B processes today. 

Formula One, however, brings the power of spreadsheets to the Web. It's 
an API-driven, JavaBean component that enables you to embed an 
Excel-compatible spreadsheet engine in any tier and construct business 
rules for data analysis at the core of Java applications, servlets, applets, 
and JSP 

Formula One's other advantages include: 



Formula One has a lightweight footprint. System requirements 
for Excel 2000 include 1 46 MB of hard disk space. A Formula One JAR 
file is approximately 1 MB. 

Formula One writes files optimized for the Web. Formula One 
can save files up to 90% smaller than Excel's in some cases. Formula 
One can even distribute spreadsheet data in any client environment: 
HTML for thin clients, Excel for Excel clients, or live spreadsheet- 
powered applets for "heads down" users who require robust 
interfaces. 

Formula One is 1 00% Pure Java and only requires the proper 
virtual machine to function. Excel requires Windows to operate. 



Formula One is built in the Java programming language and 
is ideal for widespread distribution on the Web. Excel and 
Office Web Components are designed for use behind a firewall and 
require Microsoft Office to be installed on all desktops. 

Formula One's architecture and JDBC methods enable it to 
be used with a wide variety of database and application 
servers. Excel can't. 

Formula One provides a JavaBean and applet with an API of 
more than 400 properties, methods, and events. Excel is not an 
API-driven application and can not be used as a component in a Java 
application. 
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MAKING THE BUILD-OR-BUY DECISION 



The biggest decision you'll have to 
make in setting up your Web store- 
front is whether to build it yourself out 
of specialized components or buy a 
ready-made solution of an integrated 
software suite. Neither option is very 
satisfying, especially for newcomers to e- 
commerce. Instead, I will propose a 
third alternative for you to consider. 

The problem with most Web store- 
front software packages is that they 
don't always come in ready-made solu- 
tions. You might think that you could go 
out and get a shrink-wrapped product 
suite. However, what you'll find is 
something more on the order of a suite 
of network management applications: 
meaty, big and lots of work to install, 
configure and understand. Products 
like Microsoft Site Server, IBM's 
net.Commerce and Intershop's com- 
merce server may come in one box, but 
they span several different technolo- 
gies: Web servers, database servers, 
programs for shopping carts, banking 
gateways, inventory tracking and cus- 
tomer management. Buying into one of 
these products is buying into a large- 
scale software development project, 
because you have to do all the heavy 



lifting of integrating these various 
pieces. All that these suites do is place 
a bunch of software on your hard disk 
and leave the rest up to you. They real- 
ly are nothing more than toolkits. 

So maybe you forgo the suites 
entirely and just start from scratch with 
the do-it-yourself option. You have 
already hired plenty of software coders, 
champing at the e-commerce bit, ready 
to write all the Perl scripts you'll 
need to set up shop on the Web. 
Your guys claim to understand, 
live and breathe HTML and can 
put together a good-looking 
Web page in their sleep. But 
lines of Perl and pretty HTML 
do not make a Web storefront. 
You need to understand what 
your customers want, how they 
will shop for it, and most important, 
what will make them keep coming back 
for more. And I'm not as confident that 
your development team really under- 
stands all of these issues. 

To help them learn how, you need to 
put quickly in place a prototype Web 
storefront, without a lot of fuss and 
bother and without spending a lot of 
time developing something that might 




be obsolete before you finish. The 
trouble is, you may not truly under- 
stand how to manage a Web storefront 
development project. And you don't 
want anyone to know this dark secret. 
What to do? 

Here is my tip — a radical notion to 
rescue you and pull together your team: 
Use one of the many free-to-inexpensive 
rent-a-storefront Web-hosting operations 
that are out there and get your store 
online quickly. I am talking about the 
likes of Yahoo Store, iTool, Intel's iCat, 
Amazon.com's zShops or Big- 
Step. com, just to name a few. If 
these guys charge anything, it is 
minimal — on the order of $20 
per month. You can set up your 
storefront in less than an hour 
and have something to use as a 
teaching tool for your develop- 
ment staff almost immediately. 
The nice thing about these 
low-level hosting providers, once you get 
over their lack of cachet, is that they 
aren't as low-level as you might think. 
Some of them have depth in terms of 
payment systems, inventory tracking and 
reporting so you don't have to go 
through all the trouble of setting these 
messes up. You get the benefits of their 
online operations, including all sorts of 
management and usage reports via a 



Web browser, so you can figure out 
where your customers are visiting and 
what they are buying in real time. 

I'm not saying that you should run 
your storefront with these outfits for 
very long — unless you are happy with 
their limitations on page design, data- 
base size and other constraints. Just use 
your first storefront as a way to under- 
stand how to design your ultimate store 
(or at least version 2) and how to orga- 
nize your software development team 
accordingly. For example, you might 
find out that your existing computer 
inventory system doesn't easily extend 
to the Web, or that your existing 
accounting systems can't interact with 
online payments. Or that your current 
Web site isn't going to work with an e- 
commerce piece tacked on and will 
need its own makeover to integrate into 
your ideal storefront. Whatever you 
find, use these training-wheel e-com- 
merce providers to help you figure this 
all out. And save the coding for the hard 
work later on, when your boss asks that 
you put together a "Web special offer" 
to roll out within the next week. I 

David Strom is president of David 
Strom Inc. and editor of the Web 
Informant newsletter Reach him at 
david@strom. com. 
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The Google search engine just 
informed me — in a query that it 
executed in 0.04 seconds and then 
boasted about — that the word "Linux" 
can be found on about 1,560,000 Web 
pages. Yahoo's search engine seemed to 
take a hundredth of a second longer, but 
it identified 1,976,792 pages. Yahoo 
could find only 201,474 pages — an order 
of magnitude fewer — containing the 
phrase "open source." That's gotta drive 
the open-source gurus crazy. 

Judging by the headlines, Linux is the 
open-source movement. Mainstream 
journalists who never heard of BSD or 
Sendmail became overnight open-source 
software experts the day Red Hat went 
public and Linus Torvald's tongue-in- 
cheek goal of world domination began to 
seem plausible. It's one of those good 
guys vs. bad guys contests that journalists 
love: Redmond's monopolistic empire 
crumbling under the onslaught of a grass- 
roots alternative technology thrown 
together by volunteers working nights 
and weekends. What a story! 

Unfortunately, that's not the real story. 
No matter. The real story is even better. 

Open-source software is as old as the 
computer itself. Any list of milestones 
must include Unix, which AT&T software 
engineer Ken Thompson wrote in 1969. 
Unix begat the "Berkeley Software Distri- 
bution," which in time became the open- 
source operating system we now know as 
BSD. And BSD in time begat Linux. 

But of course there's more to it. Open- 



source software runs the Internet and a 
high percentage of the systems that are 
connected to it. 

In addition to Linux and BSD, the 
open-source world has given us Bind, 
Sendmail, PHP, Mozilla, KDE/Gnome, 
Gimp, Kaffe, Perl, Emacs, CVS, GCC, 
gdb, RCS and Samba. And let's not forget 
Linux's first killer app: Apache, 
the open-source program server 
that powers more than half of the 
world's Web servers. Without 
open- source software, the Inter- 
net simply wouldn't run. 

Tomorrow's killer apps are 
available for downloading — with 
complete source — at dozens of 
open-source repositories. Mil- 
lions of megabytes are available from such 
repositories as Debian, FileWatcher, 
FreeBSD, the Free Software Foundation 
and Freshmeat. Tens of thousands of C, 
C++, Perl, Awk, Python, Tcl/Tk, and Java 
source files are free for the downloading. 

Once you get the code, you are free 
to hack at it in any way you like. Debug 
it. Extend it. Port it. Translate it. Opti- 
mize it. That's what "open" means. 

Upon making improvements, you 
may want to share them. You could set 
up a Web page with a pointer to your 
FTP server and hope people find it, or 
you could work with established open- 
source community mechanisms to share 
your contribution in a more useful way. 

Coordination is the charge of organi- 
zations like VA Linux's SourceForge pro- 
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ject, Silicon Valley start-up Open- 
Avenue, and the listservs and news- 
groups listed at metalab.unc.edu/pub/ 
Linux/!lNDEX.html. 

The coordination of open-source pro- 
jects has turned out to be so important 
that everybody seems to be getting into 
the act. Netscape hosts the Mozilla devel- 
opment project, while Silicon Graphics 
hosts more than two dozen projects at its 
Developer Central open-source Web 
site. At IBM, open-source pro- 
jects are hosted at oss. software 
.ibm.com/developerworks/ 
opensource. In all these cases, 
the hosting organization's goals 
correspond to the three-part mis- 
sion statement Netscape posted 
at its Mozilla site: fostering com- 
munication among developers, 
identifying technical leaders and 
maintaining the source code. 

Much of this happened accidentally. 
Programmers were in the right place at 
the right time and inadvertently made his- 
tory. Look lively — it could happen to you. 
But the open-source movement isn't 
all random chance. It has been blessed by 
the active involvement of a cadre of pro- 
grammer-philosophers who have record- 
ed events, interpreted history, facilitated 
communication, sought consensus and 
spoken on the movement's behalf. 

No single member of this group has 
been more important to its success than 
Eric S. Raymond. 

You may not have heard of Raymond, 
but you know his work. Raymond was an 
archivist of the MIT jargon file and the 
author-of-record of the file's published 



version, "The New Hacker's Dictionary." 
He has contributed to a wide range of 
software products — you can check out his 
resume at his Web site: www.tuxedo.org/ 
~esr/resume.html. While you're there, 
take a look at the Halloween Papers, a set 
of Microsoft internal memos that outline 
a strategy for belittling the open-source 
movement and defeating Linux. 

The most notorious of Raymond's 
accomplishments has been his thoughtful 
articulation of open-source philosophy in 
a series of essays and HTML pages. At the 
core of this series is "The Cathedral and 
the Bazaar," a long comparison of tradi- 
tional proprietary software development 
with the open- source way of looking at the 
world. This document, which was recent- 
ly published in book form by O'Reilly & 
Associates, is as close as we're likely to get 
to a manifesto for the open-source move- 
ment. The full text of the essay is online; 
ask any search engine where to find the 
cathedral and the bazaar. 

Instant Linux fortunes put the open- 
source movement on the radar of the 
mainstream press, but there's much 
more to the movement than a freely dis- 
tributable Unix clone. The open-source 
movement has spawned a wide variety of 
important tools, a long and well-docu- 
mented history, a supporting framework 
of organizations and Web sites, and a 
thoroughly articulated, well-thought-out 
philosophical substrate. I 

J.D. Hildebrand is the former editor of 
such publications as Computer Lan- 
guage, Unix Review and Windows Tech 
Journal. Reach him at jdh@sdtimes.com. 
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THE HEART OF B-TOB ECOMMERCE: XML AND EDI 



Attending the spring Internet World 
conference in Los Angeles was an 
experience tinged with desperation. The 
Nasdaq's tumultuous ups and downs and 
articles in both the mainstream and trade 
press proclaiming that "e-tailing" was in 
for hard times combined to bring about a 
new level of aggressiveness in dot-com 
marketing, sales and PR folk. 

This resulted in two basic trends: 
First, you just couldn't get away from 
folks loudly proclaiming that the New 
Economy bull market definitely wasn't 
over no matter what the real life signs 
indicated. Second, everyone who could 
shied away from consumer-oriented site 
strategies like surfers from a shark fin. 
Instead, the new buzzword for Internet 
2000 became "B2B" or "B-to-B"— 
business to business. Auction software 
became "e-procurement services"; 
broadband backbone services became 
business connectivity services; and new 
wireless connectivity options became bet- 
ter ways for business partners to access 
your portal instead of a new way to bring 
customers into your foundering e-store. 

Fortunately for me, a dot-com I'm 
working with was meant for B-to-B all 
along. And, it just happens to concern 
electronic payment and billing technolo- 
gies. Along the lines of business-to-busi- 



ness financial transaction processing, the 
Internet World conference had little to 
offer, although consumer-oriented service 
providers CyberBills and Paylinx actually 
had some very slick demos. But that's not 
to say that there is no activity in this space. 

A very important meeting recently 
took place in Orlando, Fla., and 
was held by the Electronic Busi - 
ness XML Initiative organization 
(ebXML) with a follow-up meet- 
ing to be held in Brussels even as 
I write this. An important topic 
in these meetings is ways to ease 
the conversion of Electronic 
Data Interchange (EDI) trans- 
actions via XML. While more 
work exists to be done, the Orlando 
meeting apparently managed to resolve 
a number of key issues. 

Since most EDI is based on what boils 
down to ASCII-based documents, you 
might wonder what the holdup is, but this 
slowdown isn't on the EDI side. That's an 
established technology. Instead, the wild 
and woolly world of XML development 
has resulted in a number of different 
EDI-oriented data exchange mecha- 
nisms, which need to find a way to work 
together as well as with EDI, Electronic 
Funds Transfer (EFT), Automated 
Clearinghouse (ACH) and other hard- 
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line electronic financial transaction 
processes and data formats. In addition, a 
key point in ebXML's charter is to find 
ways to make EDI as accessible to small 
and medium-sized business as it is to the 
Fortune 1,000. This may mean doing 
away with the high cost of middlemen, 
like the value-added networks that are 
now a requirement for EDI. To this end, 
key points that were covered in Orlando 
included a Transport, Routing 
and Packaging specification, as 
well as Requirements, Concep- 
tual Architecture, Core Compo- 
nents and Message Structure 
and Headers specifications. 

If managing an XML to EDI 
solution just dropped onto your 
plate, however, don't despair. 
You're not entirely stuck waiting 
for a standards committee. Some devel- 
opment utilities already exist for the Win- 
dows NT/2000 platform that address such 
a project. A key ratchet in an XML to EDI 
toolkit is compression, because while EDI 
is a relatively thin ASCII document in its 
native format, it can bloat to 15 times its 
original size after running through XML 
conversion. This can result in EDI files 
that are over 1MB in size each, and that 
means real problems for existing legacy 
EDI applications that weren't designed to 
handle traffic of this size. 

While there are several manual 
workarounds for this problem out there, 



dedicated XML compression utilities are 
still scarce. A good one, however, is a 
freeware application from XMLSolu- 
tions called XMLZip (www.xmlzip.com). 
XMLSolutions also makes other XML 
development tools for both the Windows 
and Linux platforms. But why would you 
need a compression tool dedicated to 
XML when there are perfectly good gen- 
eral-purpose tools such as G.Zip or 
PKZip? Because XML documents have 
an inherent hierarchical structure, and 
XMLZip allows users to compress and 
decompress XML documents and por- 
tions of those documents. That means 
you can compress at the root, child or 
grandchild node level — dynamically. 

XMLZip manages this via its Docu- 
ment Object Model (DOM) interface. 
The DOM interface lets XML developers 
access and manipulate an XMLZip-com- 
pressed document as though it weren't 
compressed at all, which means applica- 
tions won't have to alter their code bases 
in order to make use of compression. Just 
what the doctor ordered when it comes to 
bringing megabyte-sized EDI files down 
to size. While this won't solve all your 
XML/EDI headaches, it's a surprisingly 
useful and effective start. Check it out. I 

Oliver Rist is technical director of Grand 
Central Network, an Internet consulting 
company. He can be reached at orist 
@ grand-central, net. 
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You've just won the Super 
Bowl, and you're going to 
Disney World. Your eyes burn 
from the magnum of cham- 
pagne poured on your head, yet 
nothing has ever felt this good. 
It's the culmination of all the 
moves you made, the 
deals you wangled, the 
people you put in place. 
You signed the right 
free agents, locked up 
your top prospects with 
long-term deals, your 
game plan meshed per- 
fectly with the talents of 
your players and every- 
thing just clicked. Jersey sales 
are up; season-ticket holders 
are re-upping. Life is good. 

Fast forward two seasons. 
Your free agents walked, and 
the only ones available to you 
are looking at the downside of 
their careers. . .yet still will com- 
mand million-dollar salaries. 
Two of those can't-miss pros- 
pects, who have developed into 
your top starters on defense, 
tore up knees during off-season 
conditioning drills and are lost 
for the season, perhaps longer. 
Your offensive guru has taken 
the head coaching job some- 
place else, and your quarterback 
can't get on the same page 
with the new coordinator. You 
changed logos to give sales a 
boost but didn't foresee a fan 
revolt. You throw millions more 
at college seniors on draft day, 
hoping that one of them actual- 
ly will contribute down the line. 
Basically, you're in an uncon- 
trolled downward spiral. 

When this happens, the cry 
heard from the owner's box 
always is the same: "We've got- 
ta get back to basics!" Draft 
more intelligently, don't throw 
big dollars at has-been free 
agents, work harder to keep key 
personnel in place, simplify the 
game plan. 

Now, before you think 
you've picked up a copy of The 
Sporting News by mistake, let 




DAVID 
RUBINSTEIN 



me draw a comparison here. 

For a couple of years, with 
Microsoft Corp. leading the way, 
the Nasdaq has been on top of 
the world. Technology compa- 
nies had positioned their strate- 
ies to take advantage of the 
seemingly endless flow 
of venture capital, they 
timed their IPOs per- 
fectly to maximize mar- 
ket capitalization, and 
they paid huge salaries 
and options to their 
engineers to keep them 
on board. 

Then the unthink- 
able happened. Companies 
found that their business didn't 
provide them with a solid base 
of earnings. Their brands never 
captured the imagination of the 
public. Their key people were 
leaving to launch their own com- 
panies. The well of easy financ- 
ing was starting to run dry. 

On Wall Street, the cry from 
the investors has been the 
same: "We need to emphasize 
the fundamentals." 

The pendulum has swung 
back, and investors who led the 
high-speed, high-energy, high- 
finance land rush into high 
technology now are looking at 
such mundane measurements 
as earnings per share (EPS) and 
debt ratios. They want to know 
if companies can sustain a com- 
petitive advantage if they put 
into place a market plan based 
on revenues and profitability. 

So while the Nasdaq shakes 
out, and the dot-coms scramble 
to latch on to one of the few 
remaining teats at which to 
suckle, take a closer look at the 
performance of some "infra- 
structure" tech companies that 
have reported higher-than- 
expected earnings and record- 
setting revenues. 

Rational Software Corp. 
reported record fourth-quarter 
revenues. Sun Microsystems 
Inc. beats the earnings-per- 
share estimates. BMC Soft- 



ware Inc. also beats the EPS, 
by two cents per share, and 
shows revenues that are $20 
million higher than forecasts. 
These are but a few of the 
success stories. 

"While we embrace the new 
economy, things certainly look 
better from the vantage point 
of a Cisco or an Oracle than 
eToys or CD Now," said Daniel 
Petris of Argus Research. The 
point, of course, is that a sag- 
ging Nasdaq is not the death 
knell for the high-technology 
industry, but merely a die-off of 
some weaker species. As Petris 
said, "From a stock standpoint, 
many dot-coms deserve to die. 
As stocks, they were tremen- 
dously overvalued." 

Petris also cautioned about 
a simple return to fundamen- 
tals, saying that many of the 
accounting practices used to 
measure company performance, 
which were put into place dur- 
ing the machine age, simply are 
no longer applicable to the 
information age. 

"It will require a little more 
legwork than just using PE's," 
said Petris. "Investors are going 
to have to roll up their sleeves 
and go through such things as 
noncash charges and revenue 
recognition policy, and then do 
a fundamentals analysis." 

In other words, in a market 
as volatile as this one, stop 
throwing money at dot-com 
start-ups with no real plan to 
achieve earnings. Those huge 
run-ups may be a thing of the 
past. Simplify your investment 
strategy to keep your focus on 
companies that are here for the 
long term. Work harder on your 
research before throwing big 
dollars at underperformers. 

And then, perhaps, you'll 
get another chance to slip the 
championship ring onto your 
billionaire finger. I 

David Rubinstein is executive 
editor of SD Times. 




A little profit-taking was evident at BEA Systems 
Inc., where senior vice president of engineering 
Terence Dwyer sold 40,000 shares between March 
1 and 3 for around $128 per share. Sam Cece, the 
president of the e-commerce services division, 
sold 43,743 shares between March 6 and 7 at 
about $133 per share. 

At Legato Systems Inc., whose stock was bat- 
tered by a class-action lawsuit and might be de- 
listed from the Nasdag due to a late SEC filing, 
David M. Strohm sold 192,000 stock options at $21 



per share on Jan. 31. At Citrix Systems Inc., presi- 
dent and CEO Mark B. Templeton sold 30,000 
shares on March 2 at almost $99 per share. 

And returning to top the list? Microsoft Corp. 
co-founder Paul Allen, who will be retired to the 
Insider Hall of Fame after this listing. We reported 
in our April 15 edition that he sold roughly 16 mil- 
lion shares at about $98. This time, he sold 24 mil- 
lion shares between March 1 and 7 at between $90 
and $98 per share. But can all this money buy an 
NBA championship for his Portland Trailblazers? 
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Symbol Close 

4/25 



Market Cap. 
(billions) 



Shares Out 
(millions) 



Microsoft 



MSFT 



68 15 /ie 



344.90 5,177.00 



Oracle 



0RCL 



74 7 / 8 



205.60 2,847.00 



Sun Microsystems SUNW 

SAP SAP 

Computer Associates CA 

BMC Software BMCS 



93 Vs 

^8 

50 11 /is 
41 



153.10 

31.34 

27.17 

9.26 



1,747.00 

1,255.00 

542.00 

244.00 



BEA Systems 


BEAS 


41 1 /4 


9.08 


123.00 


Citrix 


CTXS 


55 15 /ie 


8.39 


179.20 


Rational Software 


RATL 


81 


6.17 


86.00 


Red Hat 


RHAT 


28 Vs 


3.99 


149.00 


CompuWare 


CPWR 


11 9 /l6 


3.97 


360.50 


PeopleSoft 


PSF 


14 11 /16 


3.80 


274.08 


Symantec 


SYMC 


58 31 /32 


3.27 


59.12 


Network Associates 


NETA 


24 


3.18 


139.30 


Cognos 


COGN 


70 


2.80 


42.68 


Informix 


IFMX 


11 3 /8 


2.14 


201.30 
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Symbol 
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RSA Security 
Entrust 
Sybase 
Allaire 



RSAS 
ENTU 
SYBS 
ALLR 



53 3 / 4 
36 3 / 4 

_21 

53 



1,900 
1,860 
1,490 
1,300 



39.77 
53.02 
81.53 
26.19 



lona Technologies 


I ON A 


55 13 /ie 


1,010 


19.45 


Legato Systems 


LGTOE 


12 7 /8 


903 


84.98 


Baan 


BAANF 


4 


856 


214.50 


Serena 


SRNA 


22 1 / 2 


753 


25.42 


SilverStream 


SSSW 


40 7 /s 


707 


82.50 


ILog 


ILOG 


42 3 / 4 


598 


14.40 


Marimba 


MRBA 


29 7 /s 


578 


23.08 


Brio Technologies 


BRIO 


24 Vie 


578 


27.54 


Saga Systems 


AGS 


18 Vie 


513 


28.93 
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Shares Out 
(millions) 


Axent Technologies 


AXNT 


17 Vs 


459.0 


28.00 



Interleaf 
Merant 
Cysive 
Open Market 



LEAF 
MRNT 
CYSV 
OMKT 



_31 

12 1 / 4 
38 5 /ie 

9 3 /8 



419.0 
418.0 
400.0 
389.0 



13.51 
28.80 
11.39 
43.86 



Viador 


VIAD 


21 


356.0 


16.46 


Rainbow Technologies 


RNBO 


31 3 / 4 


325.7 


11.46 


Inprise 


INPR 


4 29 /32 


286.0 


57.93 


Persistence 


PRSW 


15 1 /2 


271.1 


19.12 


Excel on 


EXLN 


10 3 /l6 


267.6 


28.49 


Digital River 


DRIV 


13 


262.0 


20.74 
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BEOS 


7 11 /16 


253.8 


34.40 


Map Information 


MAPS 


28 1 / 2 


243.2 


8.72 
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35.30 
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Centura Software 
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4 11 /16 


173.8 


35.42 


EarthWeb 


EWBX 


11 


107.2 


9.76 


ISG International 


CDSW 


6V16 


73.0 


12.55 


Rogue Wave 


RWAV 


5 5 / 8 


58.3 


10.48 


Fatbrain.com 


FATB 


4 13 /16 


55.7 


11.42 


Gensym 


GNSM 


5 1 /4 


38.7 


6.16 


Programmer's Paradise 


PROG 


3 1 /2 


18.2 


5.11 
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SILVERSTREAM 

< continued from page 1 

The new tools are designed 
to work with SilverStream's 
Application Server, said Keith 
Daniel, SilverStream's vice 
president and general manager 
of e-business solutions, but can 
work with other Java 2 Enter- 
prise Edition (J2EE) -compliant 
application servers. 

BUILDING PORTALS 

SilverStream's Portal Frame- 
work is designed to be an appli- 
cation framework for the cre- 
ation of business-to-business 
and business-to-consumer Web 
portals, said Daniel. "We 
believe a portal solution based 
on a standard application server 
foundation is the most effective 
way to ensure portal manage- 
ability, reliability and scalabili- 
ty," he added. 

According to Daniel, the 
Portal Framework product 
line includes a Portal Compo- 
nent Framework, which allows 
the various parts of a portal 
user interface to be created as 
components and then assem- 
bled either by Web designers 
in tools such as Macromedia 
Inc.'s Dreamweaver, or direct- 
ly by site visitors who are 
doing "My Yahoo" style per- 
sonalization; Portal Services, 
which sit on top of the applica- 
tion server and provide core 
features, including user profil- 
ing, personalization, work flow, 
caching, content management, 
etc.; and a library of prebuilt 
components such as a knowl- 



edge base and visual navigation 
trees. Some components will 
be developed by SilverStream, 
others by third-party providers. 

At first, according to the 
company, the Portal Framework 
will support SilverStream's own 
Application Server. Subsequent 
releases, said Daniel, will work 
with other J2EE -compliant 
application servers. 

A key element in the Portal 
Framework, said Daniel, is its 
flexibility. Customization can 
be both rules-based and user- 
controlled. The framework ap- 
plies business rules to specific 
groups of users; the rules, said 
Daniel, can be created and 
managed by line-of-business 
staff, rather than by profession- 
al Web developers. Silver- 
Stream also provides what it 
calls "My Yahoo"-style person- 
alization, where site users have 
control over the specific con- 
tent and the look and feel of 
their "personal" portal. 

Content used in the portal 
is stored in a database reposi- 
tory and is presented in 
HTML, XML and XSL (XML 
Style Sheets); XSL templates 
can be used to transform 
the content into the format 
required by the client. Al- 
though the Portal Framework 
does not include a database 
server, said Daniel, the recom- 
mended relational database 
system is Oracle. The compa- 
ny has no plans, he said, to 
bundle the Oracle database 
with Portal Framework. 

By mid- April, said Daniel, 
the Portal Framework was in a 



tightly controlled beta at ap- 
proximately 10 companies; as 
the Portal Framework is not a 
"shrink-wrapped" solution, he 
said, users will require services 
from SilverStream in order to 
work with the product. He pro - 
jected that the Portal Frame- 
work would be generally avail- 
able by the end of the second 
quarter, with the typical imple- 
mentation costing $500,000 and 
up for software and services. 

B-TO-B IN A BOX 

For enterprises looking for 
a more tightly integrated, 
shrink-wrapped solution for 
their business-to-business com- 
merce, SilverStream is also 
beta testing a B-to-B integra- 
tion server suite named xCom- 
merce, based on software the 
company acquired with its pur- 
chase of Gemlogic Inc. in 
December 1999. Gemlogic 
and its product lines now rep- 
resent SilverStream's B-to-B 
Solutions Division. 

"XML has emerged as the 
universal language for connect- 
ing communities of trading part- 
ners across the Internet," said 
Fred Holahan, vice president 
and general manager of the B- 
to-B group. "But XML alone 
does not define and manage 
the rules, events and processing 
flows of complex B-to-B ex- 
changes. By leveraging the 
enterprise features of standards- 
based commercial application 
servers, xCommerce delivers 
breakthrough levels of usability, 
scalability, connectivity and 
fault-tolerance for deploying 



XML integration services." 

The xCommerce suite in- 
cludes two primary compo- 
nents: xCommerce Designer, a 
visual XML development and 
integration environment; and 
the xCommerce Server, which 
runs as an application on a 
J2EE-compliant application 
server. The suite also includes 
so-called xCommerce Enter- 
prise Enablers, which connect 
the application server with 
external databases and appli- 
cations. The initial set of 
Enterprise Enablers will be for 
Java and JDBC, said Holahan. 
Additional connectors are 
planned for S/390, AS/400s, 
EDI and packaged applica- 
tions, such as Ariba, People - 
Soft, SAP and Siebel. 

According to Holahan, 
xCommerce entered beta in 
April and will ship in the second 
quarter of 2000. Pricing was not 
disclosed. The xCommerce 
Designer runs on Windows 
NT/2000 workstations, while 
xCommerce Server will be 
deployable on top of J2EE 
application servers running on 
Windows NT/2000, Unix and 
Linux. At first, the xCommerce 
Server will work with both 
SilverStream's application ser- 
ver and IBM's WebSphere 
application server. 

EMBRACING LINUX, SUN 

Also at the Worldwide User 
Conference, SilverStream re- 
vealed that it had formally 
licensed Sun's Java 2 Enter- 
prise Edition from Sun Micro- 
systems Inc. for use in its Sil- 



verStream Application Server. 
In addition, the company 
revealed its commitment to a 
Linux version of the Applica- 
tion Server, which currently 
runs on HP-UX, Solaris and 
Windows NT/2000. 

Although SilverStream's 
Application Server version 3 
had already been J2EE com- 
pliant, the company had never 
formally licensed the technol- 
ogy from Sun. 

Sun executives lauded Silver- 
Stream's move. "With its eBusi- 
ness Platform products based on 
J2EE standards, SilverStream 
Software makes a strong state- 
ment that they understand the 
value the Java platform brings 
to e-business solutions," said 
George Paolini, vice president of 
Java community development at 
Sun, in a statement. "Silver- 
Stream's dedication to the con- 
tinued development of Java 
technology attests that licensees 
are committed to the technolo- 
gy and deliver on their promise 
to provide customers in a time- 
ly manner with flexible, open 
and comprehensive solutions 
responding to their critical e- 
business needs." 

The Linux version of the 
Application Server is expected 
to begin external beta testing 
in the second quarter of 2000, 
said the company, and will be 
initially supported on RedHat 
Inc.'s Linux version 6.1 run- 
ning with Sun's Java 2-ready 
Java Virtual Machine. General 
availability is projected for the 
third quarter, with pricing of 
$15,000 per CPU. I 
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YOUR MIDDLEWARE PARTNER 



You've chosen EJB and J2EE for your project 
Your team is top-notch, hut do they have 
experience using these technologies' 
Or arc you learning EJB and J2EE at your 
project's expense? 

Our experts specialize in building welt-des igned 
EJB and J2EE systems- We tan help you byi 

■ Training your developers at your 
place-of-biisiness 

■ Helping you architect a ne- usable object 
model 

* Advising you on ihe right application server 
for your business problem 

■ Helping you develop a prototype of the 
final application 

IF you're a developer on an EJB or J2EE project 
talk to yoyr marragef about getting the rlghc 
help up-front. You'll be glad you did. 

MIDDLEWARE 

company 
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You are in charge of a team. And the work your team does. 
Staying on budget is critical. Staying on schedule is critical. So, 

how do you make certain both of these things occur in every 
business process? Manage your workflow effectively with tTrack™ 

workflow solutions on the Web. With tTrack, everyone on your 
team shares the same information. So nothing is overlooked, 

and nothing falls through the cracks. Visit our Web site 
for in-depth details we wouldn't feel right squeezing in here. 
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